{"report_id":"4a5a85db-08e9-416b-b309-b609388168a3","version":6,"status":"done","tags":[],"date":"2025-09-03T19:12:02Z","url":{"schema":"http","addr":"pythlive.com","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"title":"Price Feed Oracles \u0026 Market Data for Smart Contracts"},"submit":{"url":{"schema":"http","addr":"pythlive.com","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.48.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T19:12:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38800,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.865252+0000\",\"flow_id\":496934476258045,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38800,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.334589+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.871709+0000\",\"flow_id\":2025951423569235,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38844,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.335187+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.884246+0000\",\"flow_id\":1150014318386320,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38826,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334992+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38842,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.901191+0000\",\"flow_id\":1230347386690797,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38842,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.335085+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.919316+0000\",\"flow_id\":1984732622429117,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38806,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334781+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38818,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.921432+0000\",\"flow_id\":1185443503610919,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38818,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38894,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.107410+0000\",\"flow_id\":2041456255562182,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38894,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.586182+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38848,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.115881+0000\",\"flow_id\":1237382543175669,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38848,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.585717+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38910,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.132116+0000\",\"flow_id\":256824329630239,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38910,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.586271+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38884,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.144886+0000\",\"flow_id\":1059235889672547,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38884,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.586083+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38856,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.162146+0000\",\"flow_id\":1045131217072279,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38856,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.585879+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.176565+0000\",\"flow_id\":1994791435890944,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38872,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.585984+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"pythlive.com","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-26","domain_rank":0,"first_seen":"2025-09-03T19:12:03.97626Z","last_seen":"2025-09-03T19:12:03.97626Z","alert_count":72,"request_count":72,"received_data":6828223,"sent_data":32114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-02-23T12:52:17Z","last_seen":"2025-09-03T17:29:27.989319Z","alert_count":0,"request_count":6,"received_data":15186,"sent_data":2904,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38800,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.865252+0000\",\"flow_id\":496934476258045,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38800,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.334589+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.871709+0000\",\"flow_id\":2025951423569235,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38844,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.335187+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.884246+0000\",\"flow_id\":1150014318386320,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38826,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334992+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38842,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.901191+0000\",\"flow_id\":1230347386690797,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38842,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.335085+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.919316+0000\",\"flow_id\":1984732622429117,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38806,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":906,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334781+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:43Z","timestamp":1756926703,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38818,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:43.921432+0000\",\"flow_id\":1185443503610919,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38818,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.334887+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38894,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.107410+0000\",\"flow_id\":2041456255562182,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38894,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.586182+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38848,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.115881+0000\",\"flow_id\":1237382543175669,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38848,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.585717+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38910,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.132116+0000\",\"flow_id\":256824329630239,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38910,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.586271+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38884,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.144886+0000\",\"flow_id\":1059235889672547,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38884,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.586083+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38856,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.162146+0000\",\"flow_id\":1045131217072279,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38856,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2025-09-03T19:11:43.585879+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-03T19:11:44Z","timestamp":1756926704,"ip_dst":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"172.18.0.19","port":38872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2025-09-03T19:11:44.176565+0000\",\"flow_id\":1994791435890944,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":38872,\"dest_ip\":\"47.79.64.240\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"serverweb01.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2025-09-03T19:11:43.585984+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7bfd533fc877605693272d4f52951fb6","sha1":"4e286fdbd63ebabb1a4672df9cc0ff2a7ad110e8","sha256":"380c74f25c4309f88bf477ec78ef6da1e351bef7aa8f50e150e2766d75cbe4c7","sha512":"e70af9fc9303cb7a2ef6f71231b03a89ed31e27d1b3d64e0777ce889297b0b319f6adf4fce88a72743d43e4aecb246dfc63fd0470431c98225fdfe0db5d571d5","ssdeep":"","tlshash":"c2c08cc4b0c22e106612655114af38e49034402670885b028ca4dc482e630b08237e98","size":142,"data":"","first_seen":"2025-05-30T09:49:47.058618Z","last_seen":"2025-09-03T19:13:04.80733Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-01T11:47:08.692199Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b7d952fcf52762873474ce8192e7bd60","sha1":"a13179f906c43cae37c5944dd5c671d768e2c1f4","sha256":"2fb703136f0fba53ae312b7837242f5fc6985e728404cbfdbae77ec615d48b89","sha512":"38fbf60f2db601aaa675aa84ec4703cbfec671d1529aca7b9a121732b2bf9e205f087c62ddd7475284e5fa57cc9e85149f77883a619ffc953754ad08d9fb234d","ssdeep":"","tlshash":"74c08cc8a0c22d101602a41022af26e4a034442b70485b528c94d8582e220b08233e9c","size":139,"data":"","first_seen":"2023-05-23T01:00:35Z","last_seen":"2026-07-28T19:34:47.984292Z","times_seen":982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d9678ea869949c48f34d2e0ab74a993e","sha1":"61c8b7a386509526de5695bb4cb4a24b75ba060e","sha256":"833f4a82ca3ef297173529bf21b6a75b05bcca5ca712d41264f8d49355dad0e4","sha512":"c9a60ef5401595666661865af1fa0b2f685d58e569a045432319e2dc974e731b65234bdb563bfd71b039feec0639991838a7049b686b7df638742e5615896ad6","ssdeep":"","tlshash":"17d097d1e0c63c802c129829287f38e44824403ab11c072ad8accc983aa30b88133eb8","size":232,"data":"","first_seen":"2025-05-30T09:49:47.064185Z","last_seen":"2025-09-03T19:13:04.815996Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"479e2a79c34d8a0940484f61513ec897","sha1":"a44e1a707cda2217d09d06932114bc3e202f5ef0","sha256":"d025f4cfdee8afa2699ec3645fe15cdb5dcdd468c19c4c069c8913722ebf90c5","sha512":"bb795035fc44071c495dcd3a7ebd7fb2f9578df1d6b92f9dcdf49b450d256a6124373306e2040eea92b65b0daee7e4f0e867f465ee4793642b68090903a98453","ssdeep":"","tlshash":"6cc08cc5b0c22d001602642224af24e49024802670481b128d94d8482e230b08233ed8","size":144,"data":"","first_seen":"2025-05-30T09:49:47.081237Z","last_seen":"2025-09-03T19:13:04.836849Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fcd54b92fa632b8f0dc4ab0db98de928","sha1":"a4edbdbcaf08f112e606b0de8688499be04a7e47","sha256":"0827d35120d99e84e2356f47d71b1f7c7a240a15f858e98692f5ee0ca541169d","sha512":"b4ea67fa632a11f28f63fd8dc6ad98fab937882a439482de01697674d245d2a3efb7686b82ee0998140d95d6734b6adbbf5a1ce332c760418e8552b8d9670b5e","ssdeep":"","tlshash":"d5c08cc4a0c66e101612a45414af35e49034402a744c2b128c94d8492e224f88237e98","size":143,"data":"","first_seen":"2024-08-20T20:11:24.177931Z","last_seen":"2025-09-03T19:13:04.818617Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1abe23cdbd56b598cea959c23c293e99","sha1":"8533858d2cfd772b08364a0d74f33afbcebea6f6","sha256":"61e141b8c005cff5d2dbbc325fae093e56db953c737bfd88cbe8893672a14d3f","sha512":"12ec171393fef74ccf2dc4dd36bb1a3d0e0bf675e22b076f23f5192cfd46d2f72221476e73592256151b607c2390cea4b95bcf4c69ae0aa3b539f32d9560158c","ssdeep":"","tlshash":"e1c08cc9b0c76d306a026854a0bf25e490248066b08c7b038dd4e8582e230f09233f9c","size":147,"data":"","first_seen":"2025-05-30T09:49:47.057619Z","last_seen":"2025-09-03T19:13:04.815135Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2bc135aeaa9b5f230cc4595e859fa66a","sha1":"85808518c7448c299cb6001f64d7b41baab35b11","sha256":"89b808aa515cbc046c6422fc571945718350cb5139d6596f3dad310dc70b6520","sha512":"3330881d0398d8547d828d5661e7c6a8568459b03166ff9d9d0900cef6f425e07a69e6b64f6f83dce1d4e83c361b8a6124fa72b25006cebab59137cfdb2cbc1c","ssdeep":"","tlshash":"eec08cc4a0c22d141a02655090af24e8a024802ab0881b029dd8d8882e220b09233ea8","size":142,"data":"","first_seen":"2025-05-30T09:49:47.08221Z","last_seen":"2025-09-03T19:13:04.800305Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5100e2d191058d64893b57df2cfecb55","sha1":"07821a72d34374bb7c5922400613ecd7f1dbca35","sha256":"35517ec0b6effe2e90871559542338d568ecbbe1aa008c752ce07caaef9d80b2","sha512":"02bd27d07b16f15ecc903b2c1997c97c65e4a4895b0bb0e7300b8b5f84e536993d8d4cede8ab775b478bb8c265e7c70617372c5d96cd6d5b3098812ae9ba36e9","ssdeep":"","tlshash":"ded023c9f0d12d157b43a454947f35d57128481977494b53cce4d96c3a23671d733dd8","size":218,"data":"","first_seen":"2025-05-30T09:49:47.086964Z","last_seen":"2025-09-03T19:13:04.816795Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ef02702b5490c569c8e2f7dfb8665336","sha1":"275484ab9451ebc68729e36be369f583ddd4db68","sha256":"5ddeceb0f933f9cda6666982b4bc0ea48d540f9a357bb6a7ba2a648b0979fe13","sha512":"b232d03ebb23c2cb5c683d113cac3bbbe6427ba20d49f6c74c440c9419f458140119adadc8e8ad8755049c119c5d460ea90eb1730e2b0fb41720985969c3054e","ssdeep":"","tlshash":"43c08cc4b0c32e002a06641090ef65e4a038442a708c9b429cd4dc486e234b48233ed8","size":150,"data":"","first_seen":"2023-11-27T05:56:08Z","last_seen":"2025-09-03T19:13:04.785819Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bee529cff091351be6fb743d10ec80a","sha1":"37aee4d4944ac6fe87f4c8ba9deaa6b4104bc1fb","sha256":"ade4338f8093b929d357cb8dc7fb5ec3981ae226cf21034e1eb0418bef447c3b","sha512":"d4eea15e8df1649f4785f168d6661d6b9a0931884aa595cb1123adc38c3cc62ad4dadff68b3f7394e185638f1813877efbed0c811ff2e23b5d878658bd674645","ssdeep":"","tlshash":"afc080c565c23d101a059454707f29e89034401774495f03fd95d8d53e630f05233db8","size":166,"data":"","first_seen":"2025-05-30T09:49:47.084143Z","last_seen":"2025-09-03T19:13:04.825121Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"06ce8e42f22c2995b6c72b9739edcd6b","sha1":"f198b73fced9d10b6d8f14830c13ddafabb2bf3e","sha256":"d060de32a1626b230171649df3403926d2d8d6cb9d00da75397e4e03817da666","sha512":"8f7fa0685a4fc9656b42ca548ddec11a736d7d443cb0f4cfea315c7fd7e28fdb06e762b8e23941be35c6a988b032236ca0fb60a0ee112d7a7a46944e2a26082c","ssdeep":"","tlshash":"a6d02bd670932a801612a11264de20fe9634c03eb8491352de94d8482f63074953bde8","size":271,"data":"","first_seen":"2025-05-30T09:49:47.059575Z","last_seen":"2025-09-03T19:13:04.799465Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-28T19:39:17.544705Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e712cfb02bc6623c1587b074dbbb61f4","sha1":"0c8ed227e5fc914698495ce4af1eaf4dbb80d060","sha256":"c905c911479a3be04eeaccc476951c0ee81aadef91650a8efb7a2301babb550e","sha512":"e1aa29e6a3950773857f178a6f8bdf370a47f5f4ff2cf2fdb56eb07f2af47d147f96ff03812db884efa3d763fef872b6c716948396a0195fb758df7c18fa4a64","ssdeep":"","tlshash":"b8c08cc5b0c22d001a066510d0bf24e4a068402a704c2b829cd4ec4c2e620f48233edc","size":150,"data":"","first_seen":"2023-11-27T05:56:09Z","last_seen":"2025-09-03T19:13:04.811961Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/app.3212260b.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d3c4828c3408c404593226e7f9892e","sha1":"10251249a4b402d181c3b86c3ab53db67e993b3c","sha256":"9e6cd28f697d9ca75be4b186217d476026ea181d3dfa46e4e9cabe397f30bc53","sha512":"c3b7ac4c0577995eacb69eb570c87baa7c253ed03a578ae7872b821ed4d6b6f0c71158b178bca60d18a38f540814c40fb336f32b382cb2505d5460aa78bbb70e","ssdeep":"12288:k1QzuByi4BWuKLSdJNMwgLw1wEZHgud8/U:jCIeUNMwmOd88","tlshash":"88b46d5e32816d364b9b43d2a0db280bf1fc5d46e385d628d8dcc82813ded9de11b679","size":535800,"data":"","first_seen":"2025-05-30T09:49:47.088122Z","last_seen":"2025-09-06T16:35:34.064475Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"197ed70e02a33e5d531a5cfdf86dc62a","sha1":"e2d19d89bf8ab2e746f9511a319c6f90c3488512","sha256":"f45621a381eb166541ae17b881820ecdd5314f87264062732e143536ac8d9cb0","sha512":"9f328e72ac4b2f3a7da7ba4faaa5f3769845dba514251e38a729f9fa344749e50f2eef39d21ab5e9be1c8313bf50746b7abcf57a103d606703498e5a69864951","ssdeep":"","tlshash":"eac08cc4b0d22e202602699010bf69e89024842774c85b0b9d94dc983e720b59233eac","size":154,"data":"","first_seen":"2025-05-30T09:49:47.078972Z","last_seen":"2025-09-03T19:13:04.817671Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a683e5bd4075a1af45d9483a9407baac","sha1":"75bb1410f27eed2d916c5b3e846132033fb234bd","sha256":"aa6a20b1adfb4796c5085539977b0ef2350ce389880ec90fe8b8cba4d4ba6e4f","sha512":"f39277940f9e4708c226ef2245e523183bb8fa53cfc712b87167cd28ac1df67014a7e451d7e7e2f446d867bc34e21ee4f8b4a116cb886bd349c6978389ce7233","ssdeep":"","tlshash":"cbd023f571c63e105b116312657f71dc9024841735495707cc84c9683a131b14237edc","size":210,"data":"","first_seen":"2025-05-30T09:49:47.040785Z","last_seen":"2025-09-03T19:13:04.830193Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6100a6a392fab5622b943d3154a7092f","sha1":"45717b3b56769b0058d02f2926d56420cf64d5a3","sha256":"124d7888a418fe9d8e848750ea59df558b9779d86c5fc3cbeda03ee407d0d4d8","sha512":"54cfecfbd215281bbdfe44e6d7289f8cef2a2ef7fc316ca6e338403c06cba47e43a44e5749d647de9edd0d968d28df15f2ac034335064d91318250ec0ae5a80f","ssdeep":"","tlshash":"d6c08cc4a0c26d545a06a65024af29e8d038842b748c1b029d98d88c2e320b0a23bea8","size":149,"data":"","first_seen":"2025-05-30T09:49:47.04386Z","last_seen":"2025-09-03T19:13:04.812869Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f2b39606f52710a85e6896ccb7db640","sha1":"d2a95755d6a81e50bdb7389db77961e0119629ad","sha256":"c4f4ab8870273b9d579a99e19dd484a02bc9f317b87cc99e47b08813fb609de2","sha512":"72bb2c5da1dbceb09e4eb553e771fa730b493d0599ce5961543861c9dbd7ef73a37a619482a4f3dc35de1c2e5286ec47c839e52983e4cdbfe67d4379f030b46b","ssdeep":"","tlshash":"23c08cc4b0c32d102606645010af34f49024402670481b029c94d8582e230b0a233e98","size":138,"data":"","first_seen":"2025-03-17T02:06:07.847506Z","last_seen":"2026-07-26T17:02:42.82307Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e264086ff4dfd493aeaba97ca03e5a5c","sha1":"7effcacabe8a7296e6696b2d8c40d057dac389d6","sha256":"67d94e078a04463a7b90c51548221c6ee903814946aef6e85636fe59e8776f3a","sha512":"f43998f64a200fef15b366f5d71e922273fe1ec0f5940affb925cf1bd3744b874e74541e70712a2b52eec66107a9c43ef9405679d1a223b03c4d8f28c42d7921","ssdeep":"","tlshash":"8de0688367e666101b17b89054bf15e5ca20722ba285067a9d4cc944b7450b8d237f9d","size":354,"data":"","first_seen":"2025-05-30T09:49:47.054521Z","last_seen":"2025-09-03T19:13:04.791215Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b5438800790333327580106eb73521ca","sha1":"f1d7d7041b2203bbce903ebea77d62b072527d1e","sha256":"912fde9bdc750a0b59b490935aacf88dda41324dd5a98598da54214fe80f5084","sha512":"84eaf697c997fa41d45e032201ac63ffdca7384890fa4f3c93d322224b93e076d6d2de5e08a11550b35ddbb9b49c9f1ac4afabd3aa721924731cd6b22061e1a2","ssdeep":"","tlshash":"28e07d88629926146902201010be2ce08024441e714d16bb4adc84043b01074953bedd","size":293,"data":"","first_seen":"2025-05-30T09:49:47.050988Z","last_seen":"2025-09-03T19:13:04.804766Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d6d0ba2c0f705075990c47989693f634","sha1":"a1ae0358f9a4d258d2e1838e5dfa45674fff88f8","sha256":"a899f396654e416e69bd5fa246950b6e58222658bd02c26413766030ca035eab","sha512":"6411491df7c6078e9fc28581266ff1fe018c894ce3d1277d3e0970328932b440b93aa2d446cd9413c715ef98a494fa05b7ff852460fc0698ce599dcdffe26c64","ssdeep":"","tlshash":"f2c08cc5f1c23d012602741069af39e4a028402bf0481b02dc98f8482e230b48233e9c","size":149,"data":"","first_seen":"2025-05-30T09:49:47.05201Z","last_seen":"2025-09-03T19:13:04.821176Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"848616ea1ad1dc2b146fe5da21d68765","sha1":"e99e4688f1b7966d0e110ac5ac79aeee81829d1b","sha256":"3e8596d6c4f03062aaa43aa046546bf9cc1e3dfa44de03d4bf03cdf4c37e4396","sha512":"8a410057175074f4f07ab8bf46859874e4f4d6de0e070bf79ac43f1af31d23ecf3d068b60f55bfe4c4ce396aec4a46ffc7af77295cb670c21f296a6f80c697ae","ssdeep":"","tlshash":"95d0ebc6f1d22e1167022044386f3ac8e020002bb15d0607ccacc8083e230fcd33fe98","size":278,"data":"","first_seen":"2025-05-30T09:49:47.05656Z","last_seen":"2025-09-03T19:13:04.803905Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-01T12:11:12.892824Z","times_seen":7122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-07-30T19:44:59.57164Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b9ab197d92b66fb910f47a619f93add","sha1":"e0e3b14f9962636a5ed58807d938dee1c471f483","sha256":"3e38ce41a88fa039d3c30c3a4f642bcc126e938fcdd23fd9c59c3186c48c37d7","sha512":"2270c1006ece4019091c8ac64f2ae9b13e733880cfb766303a221c9635f5c158b4d83443ee691f36105a70b19ce5b23865b98fee899d94c0e47567ac26cd6d16","ssdeep":"","tlshash":"47c08cc5a0d22e1026066a9811af24e49028802a70881b038d98d8483e230b0d237e98","size":149,"data":"","first_seen":"2025-05-30T09:49:47.049257Z","last_seen":"2025-09-03T19:13:04.819533Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7dddbb7cf78ba784b86132e6ecfc10e8","sha1":"618d91c65aa0136a0cbbb1298dd6af32f449c476","sha256":"cb8dce61adcd2af9d779c9ba663701603b6318585ab0302e5de95df452895c70","sha512":"a46d297823a8f4f5eb12d14a5ed8bd2de759eafe284c1855818f91ac7f0eaf09bba8380ff991fae4b4e7a33b09c9765bb68af9ffde623c7f35f7459f536ddd4d","ssdeep":"","tlshash":"0ec08cc8b0c36e101a06765025af68e690a89027744c2b238ee8e8592e620f49237ed8","size":164,"data":"","first_seen":"2025-05-30T09:49:47.039817Z","last_seen":"2025-09-03T19:13:04.835859Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6e3c2723a70466bdedd187d8a6501a02","sha1":"8edc940b92f3a646280a3adc2d01be30e550045b","sha256":"e8eff433f9a676d167b5002d473c16c9255083513b6bcd0eef452e8281a2cfdf","sha512":"8fac1618706646dc5fc40570ee223cd8115c4bae58d0535e6af3af6a1e8b51bdef99e30043e7477d846abb2ef8fd2b2a74bcdbaee1cb1026643689de24998872","ssdeep":"","tlshash":"b6c08cc4a0c22e001702651010bf24e8a024402670881b029c94d8482e220b09233ea8","size":137,"data":"","first_seen":"2023-09-06T14:38:10Z","last_seen":"2026-07-23T03:33:36.638209Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/chunk-vendors.42e9f1b1.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff62cf3a7817b40b93bc28aa073d175c","sha1":"22b73daac4585eb1c732d6f3540fe52169f4570c","sha256":"ff7cc396ff5891dc68b320aa7df2ee476334aac825cd953c2965e43a0fc03fcc","sha512":"7bd0e39efa4847c119db2d9bbee19cd71c699dc4bce949b397d3002648cb0e2029c0af0f8db9013dc296d30097adb725b0f67ac3c7dd9dd843743ed51e29f309","ssdeep":"12288:APEQFU+SGEI+IUI7A8mmSTq5Ld/LaxM4DoBPJaRvlw5j9:wECU+08Lz5Ld/LiM4DoBPJaRvlwX","tlshash":"4a352989b6d2f09207a332f5402f0007f3b62965b84ed890f555e5d1b9bad89923bf3d","size":1095050,"data":"","first_seen":"2025-05-30T09:49:47.004567Z","last_seen":"2025-09-06T16:35:34.104488Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a620e0b15d380b8acf9db2f0b7989f32","sha1":"c7455e51a670527ad4996e567477a8fc604fe4bc","sha256":"c5e0ba9c9b782b8eb1fd801e39ae9f03502e5e373dda690a83f116c269d25a5d","sha512":"911174b576a0c92302f77abab59b25867813bc0a9f09f650d2999b0a2df6b40cb0d8bd9353757f2e654655f949f1acb9c8f0e84e86175a9e5aea4407a48251dd","ssdeep":"","tlshash":"24c08cc8a0c22e001b06b41015bf64e4a024802774881b138c94d8483e220b09233e98","size":143,"data":"","first_seen":"2025-05-30T09:49:47.07019Z","last_seen":"2025-09-03T19:13:04.80212Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1067671c75620b8d4c3f3b0c3232b980","sha1":"d43dcc1ba306eaca6f0aa37f0c0ae18e47bf239c","sha256":"c6f7bd0641b40bdb759ef366672e7b0e72639700f2fe87269313c2290ef5c0ed","sha512":"a503c59b3b856d30fe258fc0d3ec4aff99d408c607b81a55a27f916deeabc6e7080323ed190fc6f00cf402c29be47d1392cfac2e59d7f0dd131a654fc4ccfebd","ssdeep":"","tlshash":"5bc08cc4a0c22d402602641015af24e49034802674481b028c94d8482e220f0823be98","size":137,"data":"","first_seen":"2024-10-28T07:55:46.341124Z","last_seen":"2026-07-30T06:00:18.509583Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2c9d860f563a66e1629f2abb712c3165","sha1":"e77dacfc3b8a44313c397b3409efe40acac40754","sha256":"478ab7d946f0c809c2f42b8c6a9cc72b1203d37be00121e96d9035bfc5329236","sha512":"90ae19c03110500c85921f727c60eb045fe4bd9b3f5d1cf21088312bd83286772324e59f366f14159aafdaa536b7bea5cdf5d1ba51d43c350c67ad47623373d1","ssdeep":"","tlshash":"2ed0a9c9a1c3af10021a162130af39d850388016b00c2b93ad84e8e83b221f0d237a8c","size":211,"data":"","first_seen":"2025-05-30T09:49:47.06322Z","last_seen":"2025-09-03T19:13:04.803007Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"27298fcd0d37eff8574b366d123e551c","sha1":"aeb3da080098a3d93ce239c09ea5bcfb2301b5e9","sha256":"c307bfef6d32f39976a176c0a8e557efaa6d837c413f81cf092d7c27ba1bacf5","sha512":"05f9ae9ca2ded0d82323ff0623e2cd2cf9f3ba684fbca69ecd28b175e009bd0c99e07beace8c62afcf11530c54b663f9e785f237157368f64133c3864b2f0da2","ssdeep":"","tlshash":"96d07dcbd0811d4042422c5a2cafa6d4a030803639851646cc58d4873f234b9b277dac","size":289,"data":"","first_seen":"2025-05-30T09:49:47.074258Z","last_seen":"2025-09-03T19:13:04.805619Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-08-01T11:42:40.715577Z","times_seen":1265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-28T19:32:04.769573Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e355142e82f34e0f3ed2cd1e4259e7fe","sha1":"b3a3e8d2bad68814439e1f2458ec7e4fe1d5a2fa","sha256":"66e8ff7cdd0d91f1cbf34a63eb542c6552d2ef6fbd7d9b536b8f69b1581964df","sha512":"7d3aba04168e7c2cf6a4784a3cb2a280eeb9a14396afd4c585948987443eae28eaf4844a25ade4d5c0ad7031d810d01ceb55969020d85903b80573e822e0a126","ssdeep":"","tlshash":"b3c08cc5b0c36e101646675821af28e490248026704c1b038d98e8493e630f09233ed8","size":150,"data":"","first_seen":"2025-05-30T09:49:47.076895Z","last_seen":"2025-09-03T19:13:04.796761Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6b8402c353af36aa1f6fad71dbc1e0bd","sha1":"7b9c46ce76f271d6ce7b0ade32cd5f927f0ac82c","sha256":"6fe0c03663cba707fdcec2d50a95e0c519b94b6bc0dd5770b4bf239be0786b8f","sha512":"b2141808f2e57f8e5dfae524c29f6ffe277e419b1d0c299855ef41157d3dfdfc47be549f575b391004cf873edfcde18bd428ce73e20820aebc7992f9ae44785a","ssdeep":"","tlshash":"85c08cc4e0ca3e106616a46420af24e49024802b70881b02ac94dc482e335b08237eac","size":150,"data":"","first_seen":"2025-05-30T09:49:47.086069Z","last_seen":"2026-05-04T00:05:04.451158Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d31ff7e60917b0ed4a4b70d37f66a2b","sha1":"c50f1dcef18065974e84265a1a49bdd0ee29e449","sha256":"aa6fd728eecb263d1055ba5f0b243644492895c8b51fdf396aeb35f2026ac848","sha512":"37b9cf72e1f471ea4b8ab70e1ced41fd251b10d068879907f2f7dd3276ac5c5cd9b0c3b90a731ee5449d42ba3b181ce145207561b4e72ddb32bbf1337361fb8e","ssdeep":"","tlshash":"72c08cc8b0c22d001606641010af24e49024402670482b028dd4d8482e220b48233e98","size":138,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-30T21:34:04.999272Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fef82b4abb2c353da2dfe96cc879f7a2","sha1":"59a542088effa27c3f79ad2b0a3d3965ac292e99","sha256":"0ad0c2c1a0f1bb9693ceac6c25ba7d12d24185de713a94e5714b8a5022dbe957","sha512":"3560a85180f963310b8cf117ae4e8075b0eafb79a793128330a89d95581e169fe4fc2b3b2365b0e5a1ff29d925ecca83fef79f683046d7e9ea98cf436d2b3a38","ssdeep":"","tlshash":"47c08cc4b0c26d001a16645011af24e4a03440a6b04c1b038d98e8482e624b08237e98","size":143,"data":"","first_seen":"2023-06-06T19:23:29Z","last_seen":"2026-07-23T14:12:00.724063Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"179a3889571c215a9d4e259b9048fcec","sha1":"db0d06d9c405aa4169beca4e774dc4c5d1eae0ec","sha256":"ac004ac6a860e6e7ef1a8ab965da767faee1a04624cfc22478e8ec4ce9c12f6f","sha512":"4fdf325cf643f70718246fa0131ba2ac40983b6e803beccb8add04dd3296ece244afcf96656868e5dae39daebe93c55fca3b285d39971254e650a0b8fa1f2429","ssdeep":"","tlshash":"dac08cc4b0c26e102602741450af24e49024802770481b428cd8d8482e220b08237e98","size":140,"data":"","first_seen":"2024-01-08T21:59:27Z","last_seen":"2026-07-04T00:00:18.15165Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a4c52c4a58928c5aa596116f3cc5fe49","sha1":"781f7aa0c5a839dc52c77e64a25b4a22b48d15f9","sha256":"9826f0cf27795379f4c229909b9556619d50d790125e7392c69300102fe92c2f","sha512":"344f9996ab9517349fd481a836f22b3449ef7302dbb0419108722554e77b63c51eb8d8fcd2916785aa314765a3d83afbe84b6dd59f39481dcdb159daaf1444c8","ssdeep":"","tlshash":"66c08cc4a0c32d106a02682050af38e89024806770883b129cd8dc982e220b48233ea8","size":143,"data":"","first_seen":"2025-05-30T09:49:47.055614Z","last_seen":"2025-09-03T19:13:04.813753Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e57b6e64e72442b4c11726c9f51b969a","sha1":"d8975ef9b5a7995d1f388612444954228f45b07f","sha256":"cbb001c44ca596e50d78583dfbcc34980a12e89d04c2d81165a7a82af714e1d4","sha512":"799ae83f7d2961398856938d89dc10c4460a0178967e5bafde4a5b798372852663cdb0bbbd9b2cf6fc9d7c15c65cccf3b66574e115fca6daf52a858cd20709df","ssdeep":"","tlshash":"c7d02bc8a0c1aa006523505b10ef2ac46025c0752749561f9e40954d3e524b4827ff5d","size":253,"data":"","first_seen":"2025-05-30T09:49:47.065271Z","last_seen":"2025-09-03T19:13:04.811074Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"234e5d9d7c15945a863c803ee308b108","sha1":"d5cd3cfae20919a55ba9c98def357852129186fb","sha256":"6362b04b30d725862b6dc398726998516104f534f7e76c9a963cefa64cff8594","sha512":"a574b8b67d63d2aa76e377f2d3e345821a739fd53fd97723bba973502b610d0ec2dba758885eb06e73c4707dfcc23361496a8edcdbf50cd5927da1bb426814f1","ssdeep":"","tlshash":"c5c08cc5b0c22d205702645610af25e4a024803a704c5b068cd8ec493e220f28233ed8","size":149,"data":"","first_seen":"2025-05-30T09:49:47.075235Z","last_seen":"2025-09-03T19:13:04.7893Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"46c4925abc3f4e587f5161b4290b8867","sha1":"cc97b49fd78ba26d7a1c98a9ee16d34c0c84a6e6","sha256":"b573aead5f1dc703d6da6e7bed4b7bf0bbbbd3f419c65f1b43e9907cb21fcaf1","sha512":"f75c351711769892614dfe2571d2496e17946c53f9c3295df668218599a30c434bdfccd0b1f0c8c89ce72c6ca1ac58adc9bb003673726f7a4b324f2a887cf985","ssdeep":"","tlshash":"0cc08ccaa0c36d00260a641014af3ce490344027708c1b028ca4dc882e728b08233ea9","size":145,"data":"","first_seen":"2023-07-28T08:36:25Z","last_seen":"2026-07-19T02:31:38.398973Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"624e20fbef6bf5339b1bef963ea4cec0","sha1":"674b3a22687d4e054829d7104d2f19ba322c5376","sha256":"50d30f441bef500827939f79f3d901862afecb26a42be0dc8a0cbf7d94d39938","sha512":"8770257c324179881dbfdd70b16cec4b445f9f5360e1db676d24e0224d4b1cc0a3465a9fb9258d57f9b2d46e2a50bfd25368f549311f83ff97a436b15b95b4b4","ssdeep":"","tlshash":"2fc08cc5b0c22f105a02641014bf39e89024403674482b038c94d9582e220b08233edc","size":144,"data":"","first_seen":"2023-12-17T01:10:19Z","last_seen":"2026-07-30T17:23:30.668422Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b51f9088b4a3a19374981818a148e66d","sha1":"b76fda24c63bb9dcb95de5674ff3ee74f4e10414","sha256":"b1d313e3410f1eba2205ff58b7f064a658d049c7a4b6870210a7e7ed565959af","sha512":"872cb45ca18bcfaa1667fbf2b126a28143efca43d3b542334fb99489c7c8cb1f27070f0d1461da2e5b0b9e2eedd65aa97a7ee9828cafbe6b027991cdd8fdfd6a","ssdeep":"","tlshash":"e1e07dd9b0d2255029639969107e25c45028e011a0cd162bccd8944c2e661b2d37fd95","size":309,"data":"","first_seen":"2025-05-30T09:49:47.077897Z","last_seen":"2025-09-03T19:13:04.808217Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-01T11:47:08.692199Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9927c310e210a21be61a941bae3a93a7","sha1":"b9dafce1189cbf4104e49397f24cf0f211f976b7","sha256":"24f0315a40304ee92ee4de335c965298b9bb073f76fe177fc799bcf58272e22b","sha512":"6a9eaccb156cdff3f220736a2b78177633d3ce48d2d2650e83835d165698cf7a5bb8cfb31ed39d3ee612f9bf1a346fd86fca9714c0968bdab870436268fe22fd","ssdeep":"","tlshash":"36c08cc8a0c32e101702692011bf66e4a024402670881b238c94d8882e221b09233f98","size":145,"data":"","first_seen":"2025-05-30T09:49:47.072219Z","last_seen":"2025-09-03T19:13:04.793979Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-01T11:47:08.690597Z","times_seen":1015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"419a27d8ed06cf0668b35b0e4141d6b5","sha1":"eef7c48337c49d0568b34f81ad6675a30d131a98","sha256":"c74d8e6a93851041da319091c4887e99b5b1a4882115466f6c1edda7952d2707","sha512":"a23ed0e1a0dc180a64836d78eac3227175e24c659c8cbafbf2c39f614a28126d11b29e9ed04bb792538bb83a4dc918e0324981ef4d789af2ab490fff451f8cb0","ssdeep":"","tlshash":"39d0a781e1da6d650256543190ef28d66038541a73495a8a8c94d9542b320b0d233ae8","size":214,"data":"","first_seen":"2025-05-30T09:49:47.085093Z","last_seen":"2025-09-03T19:13:04.792149Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c631bb171cf290452b62291d27761f1b","sha1":"ab5359239bf855c154dd8fffe75b4f3338bc696a","sha256":"b45c706b3521f0bf67e2d57c4069144e6148c3220432108cfd76f12b2817b976","sha512":"44dfb73341dc58a09f0b70ff4c492d40844ca8ea057af41ffc4bc873ab73d4c42d0553c92222b8d83ef275ed9b5359330259ec925d2d3925b2b5d56ae6868515","ssdeep":"","tlshash":"b8c08cc4a1d63d001a02681418af24e490244027b0486b02cc9ad8482e220b89333e9c","size":144,"data":"","first_seen":"2025-05-30T09:49:47.071192Z","last_seen":"2025-09-03T19:13:04.809085Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fccf3991d8fe6cab087da7d2b0eb2876","sha1":"a5c5d8a9f6b90d11329149b99547cbbbac5fa8c7","sha256":"5852eab3678899ecaaf5a695c16a32b405a77799965b2a24a4022077fff36ba9","sha512":"5cf75370b1e988fe906112482f36df2945154f01427af0f579278abe8cae7792c08571561eb5d43e42c16e6b7a0c5cee9abd82ef1e2c1ff91c986ab20f270a69","ssdeep":"","tlshash":"ecd023c1729639200607754581bf34f16130907760841b57fcd4c8443e530f55233fd4","size":207,"data":"","first_seen":"2025-05-30T09:49:47.04293Z","last_seen":"2025-09-03T19:13:04.793084Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pythlive.com/js/assets~contract~register.71c03a8f.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/assets~contract~register.71c03a8f.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzq5g49oE4ziXDxu%2FzzsyRXQ5pCVxz5WAkpt8gvySsly8bKzj7bui374swy2s8COn5XjD9YD3B1sQAcCXX7v01687AfkLtStvWCAXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-6931\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e411e05723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26929), with no line terminators","md5":"e9658709b267286b58582b6f971d91d7","sha1":"e6ac91bceff856f4eb1de39eace5dccec8b05f2f","sha256":"3f4e09af3bc671780823a883ad39ed996ebedd205d2073fd6c4fb62b343667d7","sha512":"f2cd0e2aa1500d5a5c867963d93976d120921c1f30fbec3ae84774b3f02c8349a5c25b7d3bf909df9bf8770ecdccb6ca215afdfe45d0835d7d53ad0fbf0595be","ssdeep":"768:FL2m5vnj59KAUE1/mGkFZ7+YiSMTyBC7q:hF5vnj59KAUE1/mGkn7+YiJTjq","tlshash":"17c2a558b2d6b0da06b7b3e5c02f1149b3b66774f44bd4d09923f4d43868ee8a126e1f","first_seen":"2025-09-03T17:29:31.697817Z","last_seen":"2025-12-20T20:14:53.716279Z","times_seen":14,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/binance.f9927914.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/binance.f9927914.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtKMD0KMaMcdPjKjO5klW4KRuUXXg%2FGrdxml0i1ESz9znZGMHDFz9ELHF%2BYq1nP%2BdP0%2Fsw8H%2BCyUAwg%2BPWDaLbkCBERaDkodUVFPzg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1007\"\r\ncf-ray: 97978df44af2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9927914e5011101ef5a19baba09b76b","sha1":"b94c9bf35a571ba1f8c7bd1b5cbb13bc388eb0d1","sha256":"d1c4e4428929677d805c55bdcd63d8d14254f29bf74fbb68bede7656d0cdf803","sha512":"8fcf3e0940ba21d0376d28e7a374899089c38cbba084fef9130c2047bf2af779a53ecdb2b3f45564d46b775a684b4a49515e0af0d9701c3da450d32263407de6","ssdeep":"96:jmX4eh6kvtfAWCVFNXoIvOa7saKUOZPmoNf3r:ji4cNlCxVDwaKUglr","tlshash":"b181c8fe5c8443e58b02e3f6e537a12b559738ffe5e1c14989008d5299b2056de8dcc3","first_seen":"2025-05-30T09:49:47.021273Z","last_seen":"2025-09-03T19:13:04.726008Z","times_seen":14,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/authentication.1caf986f.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/authentication.1caf986f.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZjBRMwHjuJjaMLA0U2sNa3AxK6uBVN6nSQXTFNG6pKd23qoyZwuZ6F95TsZV5HZkIB7NpQKIw6wrfeNbAORa6Ss1rmfgmykoFC60A%3D%3D\"}]}\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-3bd\"\r\ncf-ray: 97978e3ded4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (957), with no line terminators","md5":"bb7aebead9569bd97b0d808318452a4d","sha1":"aba5fee6c9b59314baf8cb200463c939bd862e4f","sha256":"eb6cc289b0116a18ef649bc83a890c51d19b9524c4c76cca35514abe78bffc4f","sha512":"dbc96de8f2aaa840562b89b29e162cdb81a81dff0676a919c91d5fd758f9ab031f52e9f3e8735d3ac1211595bf5462b6a929e9ffe7764605c8319840f59eea3e","ssdeep":"","tlshash":"8711ce318351689df47ac8e64504bc98654bd212f41626fff7e911ceddc132655e270c","first_seen":"2025-05-30T09:49:47.018724Z","last_seen":"2025-12-20T20:14:53.729418Z","times_seen":15,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/about.a543728a.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/about.a543728a.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8bihuukYUfD6GGiZuLVXWxwjaeKs0MyDDiye%2BEgLxpioWVFCee67kNaFyE1Bh1o9tHeqTzB%2F1EBJReT%2Fs4jCIxtgMbzvSYB9ADY6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-41a\"\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3f8d8c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1050), with no line terminators","md5":"4e7feefb17905b63a86b6432c1c297f6","sha1":"0ba66f88b7e7fce802e067f5f5e6c15c36ca1025","sha256":"6da6e0b2e96fb1b23df75550436e49ee6be3ae783f1bbcee26d37c075c205934","sha512":"55ff7370ab70c3d71d2a993c785e128166097f5796b2635763e3236964db8fe232ff2e9231bfdafc2017073f611eaef8c26f60286d351a812d0db5bfe7374927","ssdeep":"","tlshash":"42113d46a025ecd574fd81eb0c270259f6f07718f0b1d670a6e8e89cb729da5910f692","first_seen":"2024-08-19T20:41:34.050327Z","last_seen":"2025-12-20T20:14:53.753786Z","times_seen":15,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/options.bb52cba5.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/options.bb52cba5.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4NN8bgy4uUZmaTUGQ7OEmWnRsvNUsuUMpCc9KNkbzOPSCdKhiqrmVjg9I2%2FsaiyDEo3KATN0KEl4mJRVpE7In%2BhWeaJqafq0dC8Jw%3D%3D\"}]}\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-14f\"\r\ncf-ray: 97978e443ecb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (335), with no line terminators","md5":"f041aee19a3e8fc468655a39cfd1180e","sha1":"befafa11f17e62ef6b0b760794263368f8052f99","sha256":"21668bc127384e0236cb0e0511bf699874867f99f27bf259ef6c12007dd42b38","sha512":"17fc417dd93bc8e21cb3dddf2b45fed038a55cea7ff2baeafe672539fead82ae23c483c02ccb613194b676656adbc5c12f9f159b2e6a05023f7e28c0ad02d561","ssdeep":"","tlshash":"cae02009a050b88419ff81dd0c661348d435d36a3d77dcb266e0d0d66515cbae557615","first_seen":"2025-09-03T17:29:31.720645Z","last_seen":"2026-02-15T05:28:38.261302Z","times_seen":14,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/chunk-vendors.42e9f1b1.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:40.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/chunk-vendors.42e9f1b1.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgaaPBIcyz154KryztQON4ReKJDkxLk7iK56Htmltg6isLBSEln20sDkubbzuLPcEvLEHw42wgeP%2FQqLD0hHwlgaCGESvIkIhr0tZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-10b58a\"\r\nexpires: Thu, 04 Sep 2025 07:11:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978de5289d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e28f30f1dd3777851fdb9849ade2834","sha1":"e1a842897d52c0d40b742867bde4e2ed661827c6","sha256":"87ab098347d6d6621f2645f7323294d83c90f6cc36a9272dd0d6970c1c843b0a","sha512":"09aa3201e2c7d0dd240b43fdb7c69067378a86ff23ab47107c1ac0d7a6576e8334de2f6b2a4cbc4831865fffe1a664d518723493f7e4678437013c203898a54c","ssdeep":"12288:APEQFU+SGEI+IUI7A8mmSTq5Ld/LaxM4DoBPJaRvlw5j4:wECU+08Lz5Ld/LiM4DoBPJaRvlwu","tlshash":"48252a89b6d2f0a107a332f9402f0007f3b62965b84ed850f555e5d1b9bad89923bf3d","first_seen":"2025-09-03T17:29:31.713482Z","last_seen":"2025-09-06T16:35:34.063818Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":1376,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/injective.7bde330d.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/injective.7bde330d.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EA1jmiluEJ1nAEJH9cJsNxg4SETJYYbmmUOZXi3SXk96E%2Fcnw4qMAW8z8edNXkfpSXL361H%2B8lzPvIR8rcMshI3TwIssSWZUCbjYrg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1188\"\r\ncf-ray: 97978df42ae1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4488,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bde330d83187328ef4b8c38f3711cd6","sha1":"4ee0272344efac5b8b20885cbc0b8094d445e640","sha256":"abac14710addb3fc70079f90cbc6cdeed0641497059eb7bbb5a6e4343a2b96b2","sha512":"0bff54d7c25b2d5a052ea1375e0c528dd477067f2e6fac8f75430629a9e8224e6bf7e428325d300b34d84ecd30ba963b12d74cb03c847c76e19222621ece738b","ssdeep":"96:3GwtwCO6rWJjJBS0vIX77nn7mWWJY6LDIouhgSOUywSMqJl9tlMF2nxulp82:3htwCMun7p2xwQhtG0u9","tlshash":"cd9154f032d462f0e802e351ce3f786275ab78fa7ae547958251fe009b1a05a9dcddd4","first_seen":"2025-05-30T09:49:47.032676Z","last_seen":"2025-09-03T19:13:04.742532Z","times_seen":14,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/imc.befc7f42.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/imc.befc7f42.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jK%2B7sp33NStvQEoBkLVhdNHK7tN2bFrVVt09tUGyDOQktekM2sdnzmwMf2XzG5vDrnnjeOH%2F0PQlnKnt7qPb%2Fp%2BtHrCpdOyXOM5FJg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-e0a8\"\r\ncf-ray: 97978df44af8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"befc7f42447a01c9a14440fb338ba645","sha1":"8b13dcff013e5d3b1c9589e1926e0cdbad67f1cc","sha256":"f8349a230f811b89acd93cacd12b5f29fb7f82c615d9d9ec8bc9e9eb8ea78ecb","sha512":"a9f3f62a3077f4f09ed9aab6905418b2bd91fc481fe142a31296d41dc0dfd416fb9e23df376eaa900037e0e7b12e141a240b09307cc89a184412fe07aa3e3a20","ssdeep":"384:zgEYROGZMJ8rUJ+hiiRHv0+JE4xyxSA0r7xyAeK040W2HZh+wFwodfH5gXT7Ap3E:o5XHvdER/Kp0jHZh+QRgSj2RXSzS2SAs","tlshash":"664373e5728821e66503d3e4cd275836679a38fe7f16c29e8392ed9854441cccdeccea","first_seen":"2025-05-30T09:49:46.994419Z","last_seen":"2025-09-03T19:13:04.760817Z","times_seen":14,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":461,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/12/505a1359d68ca35d.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/12/505a1359d68ca35d.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1225\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F0C390C33732A788B8\r\nAccept-Ranges: bytes\r\nETag: \"A13C0CAA0C7D9BAE8261346FF782E96A\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7189141310311933974\r\nx-oss-storage-class: Standard\r\nContent-MD5: oTwMqgx9m66CYTRv94Lpag==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"a13c0caa0c7d9bae8261346ff782e96a","sha1":"7a9d8a5ee8efb585e237e40675734b673c60cbf3","sha256":"3e7e2c308ca3a70adcfd11a31917b13d791b678c73f7604cc9915d63fb9817a7","sha512":"cda0e9a30f1c645b5eda8cd7d0fc0357ea206b805d780772b95840335a7d7ce1aa8eedd7df0aef189c64a9a604d5c44db3a5d73f33570b7ed3a6e71ac54b848b","ssdeep":"","tlshash":"a621ba5f652d8ebc198c1d7513d2d7f6f443381b3205c005a6f7e47e08b31811935611","first_seen":"2023-11-27T05:56:10Z","last_seen":"2026-02-15T05:28:38.243897Z","times_seen":28,"resource_available":false,"data":null}},"time_used":2037,"timings":{"blocked":875,"dns":29,"connect":281,"send":0,"wait":283,"receive":0,"ssl":566},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/17/3640d27c7fea73c6.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/17/3640d27c7fea73c6.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 4001\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F093A7E9343132AA4D\r\nAccept-Ranges: bytes\r\nETag: \"B7ED53CA5A43594D3208EAF004B23C8B\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13128921010520711060\r\nx-oss-storage-class: Standard\r\nContent-MD5: t+1TylpDWU0yCOrwBLI8iw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"b7ed53ca5a43594d3208eaf004b23c8b","sha1":"64debe49d00cd342f34dd38c6f391464b20e89df","sha256":"d73bcdd7f898d905f71ae7e0dc246b17ad7142ec4ab139e962e02552ce87088c","sha512":"796efaf3a4fbaf321b69daa7462a3a3080229cb5ec5f700d2e8d736fd5b8efa70500db296b9bebe00d49060b141659ffe512e99154d87ca40550b116fd5ed2b5","ssdeep":"","tlshash":"34817c40a7d9c1391287ed9693115c6ef06b9f6239d0b39494c0f82c4dbfd994f4028b","first_seen":"2024-01-09T01:20:54Z","last_seen":"2025-09-03T19:13:04.778927Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2106,"timings":{"blocked":902,"dns":31,"connect":290,"send":0,"wait":294,"receive":0,"ssl":583},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/register.ae5cfa0d.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/register.ae5cfa0d.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9r%2FjF3RqtT572zWwPEKkRjdH9K8Sn120AhwTSGdErGZO62aqSqywWZVrgvrSRCzWZfd0EtF5sOM157mdW6dJ1%2Bq%2FKVMjg9JJRXysjA%3D%3D\"}]}\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-116\"\r\ncf-ray: 97978e3f8d89723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a794140624b189bb2a25da08869451dc","sha1":"d308aaea2d5163d7d6c9e456cdfba16f1b8639bc","sha256":"83c6a6944564ad70600ded0321979dc9ae7b5d9827573b2149df3cb1e321eab2","sha512":"02ed02e15cd7474bed19898ca22fe515b03450edc042d34685c9dc46d1d157e8546517611c4b4a2f778c878539eea6921f461a51c6713629ae58ed6b682de1e0","ssdeep":"","tlshash":"ccd0e701c411741e44eff3646a1c90483230d00fdc3f5b1e7616316166c19e331f3544","first_seen":"2025-09-03T17:29:31.748349Z","last_seen":"2025-12-20T20:14:53.738806Z","times_seen":14,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/assets~authentication~c2cDeposit.06871783.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/assets~authentication~c2cDeposit.06871783.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npGixjjBc2qvr7dDHoQr%2B1tenn1917w9l%2FwDxAVwbpwS54o8POQgKp863r0LozoBGk70RcPNxfXHaPX8xkY9SjZmJb%2B36gA1Tt1q2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-4a01\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e411e04723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18945,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18945), with no line terminators","md5":"0316ef6af80b6ae7517ecca2e713eb3f","sha1":"03b64d9c3d3e633eafbbdf0ccd9d5f0c1786fcc0","sha256":"49441fe3c05d9b9ece4fb191be3ce471b22cdc3d065cd1c748eb52c6d9060e5f","sha512":"2d3c335373f912584622d713737ebb134dc865a50a04c93e8fd2249644de18d2731c185e79f77b68aa6b565d19c151ed0944cb6c3eda38095578602364129f00","ssdeep":"192:DzzmvWYBwRhhBzqHA9tZnb8Y5U9jM5bmeP3gU7l9K24mD0IyykNIrR5ing4VtlLR:XaHwRHQHgb8H9YxlM2xD0Xq4gEAqFkHC","tlshash":"bc82b648b54af4885f77f2e1807f0106f3b92b62b409c9e5b103f0cd69a9da89627d76","first_seen":"2025-09-03T17:29:31.754378Z","last_seen":"2025-12-20T20:14:53.774848Z","times_seen":14,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/synthetix.dde65cc2.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/synthetix.dde65cc2.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aT61V%2BM5F7izaGmOQDuSnsPOF5MSaiyES%2FimAm%2FcQVO3IPiNIqM4h0pY6Ps7Ql8VPquOSlMHlY4bW6xWwwD2Ce3bwVjthqk5eGUB8g%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-2148\"\r\ncf-ray: 97978df41ad1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dde65cc26e55b5d86400b4fd90900a45","sha1":"6b57938c87d5806923c0c27042dbb9ab1512d5e8","sha256":"275f363bb652b7ad17b8bf2f8b98fad54547c4a9c8877e6fc83a2b968afcaf3a","sha512":"2d46ce4faa72f087cb1604e28ed92a76029c2c7f2f6690c4d6116a2dc46ecf722b41ea1c4527a60a28e266d636d999f4c7de297f9a2e968078d02f20c1fa424f","ssdeep":"192:28fwBgwI0l+YRaAlqWG580vBHVOV62glV8Tt70ZY8usMaVrc6:28IBgt0gYRaAEz580v9VOVT8Oh0m8usB","tlshash":"d802b7f9b3e4a7f85c06d7adce6945bde61b28fe2f9043f802991845e4261dc8dd0909","first_seen":"2025-05-30T09:49:46.982754Z","last_seen":"2025-09-03T19:13:04.736712Z","times_seen":14,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/data.521d6b2c.webp","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/data.521d6b2c.webp HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94778\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c17649-1723a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0pWEU85HqEFx6wmLTjTQOY3%2F1SDoE8%2ByFMkHnoEcq%2Bvovcq1hHSmgBIxkwaYBPYEBj%2F%2BcVJJ0k338wNWi0cPbQeKYX2WLGY8zttTw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97978df47b02723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"521d6b2ceb0842bebc7ab9c6423ed481","sha1":"e68dc05f634c332fe005f82bce53e87aeab6aefc","sha256":"417fdae177fb6bd1e7dd66d02586e9fc29ccb54a611ece78e7ed4736dc2bace4","sha512":"2809374a8a11afde90f6de8b2824f8f257fc16a017bf126e2278b3e7a5d17baf8dab088a0b4e0121ea8a88bc2a69667df6c3077e5945abf817b8b6c359284868","ssdeep":"1536:KJXimE9lVHIdgvuSzBpF1Hl8aC91k8uQ8dsCBf3fnhPWsk9lhOrTcT66QT4N:KBimOVodGuI7F1HlaV8sCBffnhPW99z1","tlshash":"48930296ac1d5d92fba679392d44f704b42e59c50aaecd6100c72124b447347cb2bfe6","first_seen":"2025-05-30T09:49:47.007598Z","last_seen":"2025-09-03T19:13:04.732281Z","times_seen":14,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":468,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/contract~staking.4bda9afd.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/contract~staking.4bda9afd.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7tKO1QywtoQCe8RALwp9S7bAHoZJc0Jut0UIwZUC37XEgmngXQ%2Bbc8msplZw84LQrZxrRZnQl7xUXWHr8toFAwOsw4JZtMQI3vJXYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-4ea4\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e42be82723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"bc3613ccacf3118f3a8402dac063243c","sha1":"6c04d7e35916526fb16b5942b3b5ca1484cb0e27","sha256":"e597bee0401f63ad08f45157feeddab8360c29991bd422d83ba58c151b72e77c","sha512":"0ee4d53c4cb4411f1a8c14d2fb88d9ec5ecdb38ac8019f254041b82b07f8d77636d181454032909c78ef3a3e65458ddba567eef7881a2a79343d1b611ec1708a","ssdeep":"384:W5Z2gk90P9RT4uBGFEb/a0uaEIqr21spNSKztN:U2rilR/b/6Gqr21spNSK3","tlshash":"5492a654b6d6b4a546bb63da912f020ab7fa27b0f05bd8d0dda3f5c02828cd95032d1f","first_seen":"2025-09-03T17:29:31.711224Z","last_seen":"2026-02-15T05:28:38.244508Z","times_seen":14,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/vela.fded78e8.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/vela.fded78e8.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BwsixW7TkcrAX2L4L7bTWBQ%2BO0jgYd4TP7VPypuAz3VEhWO7%2FoCnJxQwHVM0iyRvW2tCMzMpuwTT0kofMARQcm0vKzFmc%2BkOqSt5w%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1a3c\"\r\ncf-ray: 97978df42ae0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fded78e8aa07dce553b8a25643443165","sha1":"0c063ff41ddab5351a623f05be1c50b3b57bcb0b","sha256":"686b5eff87f412d38541edce0309ff7427198897a5223e404c651fcd8f2ba087","sha512":"df73812c4a7c8eb28c802003b7bf64af2fd34d0967d46f0664f15e23fc83321aa4c5e4d41d49a2b6412073a34da907e7e5ea70e4b40f4d7c04c66c0c48ce2c93","ssdeep":"96:B21HdF2TXZFPwA8r7zpGDoxJVWgEnBRpcqx1qEvQtKs+skiXAh1jN6gsN4hxV3tY:EFdF2VFw7pn+FnhPvQtgV1jcg7VQ7R","tlshash":"c1d185e033d9d3f5d80ae7948f1da036751f21f82d2a42bc87e32e94a51856f98dc9e0","first_seen":"2025-05-30T09:49:47.005567Z","last_seen":"2025-09-03T19:13:04.741222Z","times_seen":14,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/tower.675e8fd5.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/tower.675e8fd5.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5H04Lw1OVS4OwqlUBU%2F%2Bu%2FMEXH7FE2KSZzenK%2FGB0%2BdCQ0GRdcy6PthcCL9OIeukArVehUTkO4WOdfV1sKEhXmLuryakgWEeUwa7Q%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-24ae\"\r\ncf-ray: 97978df45afb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9390,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"675e8fd554321fac937484a25b479e93","sha1":"b0980ffc8f4c78235e90a6cdd5b33cd13cdd5842","sha256":"68ebd477e1c1d38f49662ca67fb918bbca688936bf79e592fc903e383016f4c6","sha512":"6879426e5cb9c7578e474a186391f4ee704810ff8478bdc0a000059db2a7d2b6cfba2049a5f7c7684ba4eac929137d3401cc2e4c666177cf1994a17977c90583","ssdeep":"192:27GAlRIBYOICcVwObhVGvQJhsWFfed1BcC52BEf+2LdBqk+Svis:2yAlKIVwOOjSWvB9rL+kz","tlshash":"6112a789336be3f0ea51f3f78b2b90b7666b20d16d2284ec46335d54dd0685f589acc8","first_seen":"2025-05-30T09:49:46.998517Z","last_seen":"2025-09-03T19:13:04.755848Z","times_seen":14,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/usecase.4f151817.webp","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/usecase.4f151817.webp HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39232\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c17649-9940\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdGdTNeTR5Fcr13iI9pOjcPp%2BmRUDTQ8ZO4Dv1suAaQSJqgqyiiDR%2BhWnGyYOukshnpaJPhm9Q2YxljVAXaQggDMX4nsPhpoYxBx7w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97978df47b03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2048x1152, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f1518175f4fcd1b945698908a51bb36","sha1":"a0ef06145acfc35c2d497df364f832ba7b49a3b5","sha256":"31d90e7ac4b136b2973ec5714de0360c3f8ab46e1d7307bdfec6ef4ed0e1cf4c","sha512":"826fee3e8a271f9cadf1d1a508cac90dd3e3402e59e5cfde20258937c049004c9ec594d4064a6cada3abad19b3117b5aabb902ed3bb2689889a45344502545c3","ssdeep":"768:lmZZjBVR+6uvtBE71qf+UO+WM4QkTBptPX20agoJDQHOxsC8gD5BRE0Q3TYB:lmPBVavtG70JixvtPX20aReGsC7D5BRD","tlshash":"3e03e011b90858e7d2a020f1ffc82927c7da3ed49a4af7e1231ee34249627d7348985d","first_seen":"2025-05-30T09:49:47.011433Z","last_seen":"2025-09-03T19:13:04.773014Z","times_seen":14,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/contract.4df37b25.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/contract.4df37b25.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcuSLwPQjvLA92Ww%2BLpktZMHG5vZCnuXucsJRSnigp49V%2B2UtKUcglMmrCj6oqWw%2F6Ezc89OOWxz4QxaiuystxesgrG4FqnakYxyFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-2198\"\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3dfd4c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8600), with no line terminators","md5":"2b231d8c01d273aeb9af96e13a89073e","sha1":"855d036a68105454f6f63d0d2261575c45a18839","sha256":"17fd8b41896441fcc8ca06a5802f0047fb00b8fa61c83d6cf7d22c532c4698a3","sha512":"45b6c256271f7bb7e6c35c1f63571f891510567a6adb72381f0f283e3a232d69b273028a424c7b0609b9f2b8a67b877b116cb4565d9f6aaf4eb3f88bd103351c","ssdeep":"96:gK+WpAdDafwgYPx1gUtaZ4p25sicqgiY707uMg3/FH6/D6:pAdD5gYPzF9p2+tM7I316L6","tlshash":"75023021a51d302f7633ed1254d4bec82525f22bd146123eea90646ecfdbc533a7ba98","first_seen":"2025-05-30T09:49:47.038087Z","last_seen":"2025-09-06T16:35:34.059791Z","times_seen":13,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/login.fdf65872.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/login.fdf65872.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAv4csD9CIQtqiX24be0o9orXWCWxjUFYWUpd51s%2BEumiIgIeB5%2BLb1Bwe8rBaVpq30Ei%2FinysXxbLgfkoSuDmttPofQiyOMyQSU7A%3D%3D\"}]}\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-cd\"\r\ncf-ray: 97978e3dfd4d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"9abf156f0dcce7e407c2c268d1fc55f9","sha1":"0ffb6fd1c6669c30005b4ee00d7605658300c93e","sha256":"287bfa9bf5d1813592951bf00e67df1f3d6aa6016e583cd0c358fae9af534af4","sha512":"07c9fc8eae2132c46602b41c8d30e8ccad72872aaa603019a30901b11be89f9d8ab0bea0b76908ef6857af296656d002b489f433e8c605a4e82e9042944a625a","ssdeep":"","tlshash":"46d0a73a11451e0eda8b408417e49263744830b09255cb1e0c352351ce4d33251d1bb4","first_seen":"2025-05-30T09:49:47.02256Z","last_seen":"2025-12-20T20:14:53.714711Z","times_seen":15,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/assets.34c5bf44.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/assets.34c5bf44.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3i75%2B%2BbSpZ9PQoYbGBsSpFd6M1KM5jdZhQZfqaYqXfEK0wMPtoRRjrRKaSK%2FT8wQx1USJSUJpnwmh%2BLYVD2PHO7skXrTgvTs5y33Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-1d99c\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e410dff723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"041c61a7cea3cdd967d9c02b95f26bfc","sha1":"a1a2a807ba09d476a52bda8bef19009cd825ff74","sha256":"a01c2befd27c38bd2b0a9e867b46879560c28c7cc0e0f35abb41c973f716f043","sha512":"2890a4d554cb4d2892a2b09ee0a0f37b88c66fdea69fb00a4917e1bfa5a60ef43ecbb53b89618e70c4b8a6b6495fc9b5de0952591de5e771396bee5d91a4595f","ssdeep":"1536:dMIOhKVW/MS9D4/MWX8z0JDU882xDbsbLMM:dMIOhKJSyECJ4D29bgYM","tlshash":"dac39745b056f8f612bba3f7503f0007f3b52b54e059e5a092a1fac83a29d98d217e5b","first_seen":"2025-09-03T17:29:31.735782Z","last_seen":"2025-12-20T20:14:53.739565Z","times_seen":13,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":476,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/login.e1cf2c07.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/login.e1cf2c07.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5W81oPpg86HbCA35HpU8kErlAJRK12NyDmJ9jeUJmu1de5gf1N10kEEMNE6jC5cHBSzKd3hsZYbZeHEE0Si9RkjdpAbp3RngP3P88w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-13ae\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e43eebc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5034), with no line terminators","md5":"64cb77786bc554f56c67aea1e32b74e7","sha1":"be3500489c4ef8ad509979152158113a3ae7cdac","sha256":"6535540adf073cc9da7f9aeaa48f27dcb6841c077427f0a37b866a592d539278","sha512":"6b158d58b44bbdcbf538c71f83d9ed1f118f70b7d581b8a495393ba67fa3034cb2cf8664002801d5eeeba34293ec2de4f6875538a44f455be152ec8fc5a0b3a5","ssdeep":"48:lD3rqmBlqH0GtkZ9sH00dkFZ0FU4uaHceC5Lal/2OpmqbOSMnsdj67jqrDKzOAwt:t2TRBuWJ9mf9sdjcOKzxwv1Ksxf7","tlshash":"08a15305b0a6fccf14bae2e75426100ef3b56994e497e420aee0edcc7a2a948521675f","first_seen":"2025-09-03T17:29:31.746167Z","last_seen":"2025-09-06T16:35:34.050763Z","times_seen":11,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/chunk-vendors.1f1eed67.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:40.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/chunk-vendors.1f1eed67.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUyw2EAiBvB0H%2BPrn1sg5K9nE4hXrAKFgZFdAw6poEYYGtPt9r2hqg6%2FhNvCalbovT4E6sHyW4pRx7AMaKI%2FkIeI97uGUUMJfImMug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-31e24\"\r\nexpires: Thu, 04 Sep 2025 07:11:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978de5289b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":204324,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"32b5108930dd443139ac14058a54461f","sha1":"cc3fc2373ecd33188d2d518149df9f095ea54a47","sha256":"18470caaf81b934223cb5a1a639b86c80e3b74e5090fca68ae05c7985f80a2a3","sha512":"16e7090d56f49da8779f58218799bab8cf320e3496d22ae7bc8e4d88a542561f3bf99b9cf74be9babd02f618348271393194d0932b71f6cb26acbf564ca1c2c5","ssdeep":"3072:C+0aRiObemuyeJRYW3wpV3crCacKhY++fuCCSdSnZYqIRsKb0u6hddkDJ/bjJLYu:gfKeVK5e/QEVc9","tlshash":"f114fbb2b689280a6057c1a991e0bd79963ec902f32319a7f3f4ff364bc15e75533285","first_seen":"2025-05-30T09:49:47.014248Z","last_seen":"2026-02-15T05:28:38.269909Z","times_seen":20,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/kamino.61295e63.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/kamino.61295e63.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:42 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CeaWpEm0H5kswzX6NraAQMXjqt5%2BMowylWxWMZ98njLdvaqNCylIBsTSySKaa84zn5dxvihdu7uwcSL8FHXm3C3mHH8G3ZD%2FIySDVg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1f06\"\r\ncf-ray: 97978df41ad7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61295e633302ebc53c3f147a92dd6986","sha1":"9211a4d23722c0307d5e4ef54443d8b85e1ead58","sha256":"bed89720513c5652bca7d072e758c467d4a06d1c372c93e9fccd5a83cdea1c47","sha512":"a05064ef4d4b216032e1b8d44ba117061cfca1f7e55c0a268e392eb3aa30aab68a711e3888c81257f250a74b4e020f8e6264d05af8c09a4b9f216b6c01c54802","ssdeep":"192:6nMAWzw2DCh3C7az4QzBVX9gZ4fspIL1ND5/3Y8:VDCh3cazplpOmpNV/D","tlshash":"0bf184db33ace1e4db44f3d2862e55387e0b31f23a26d959c7a6ae823b5141f4844cd0","first_seen":"2025-05-30T09:49:46.996381Z","last_seen":"2025-09-03T19:13:04.764807Z","times_seen":14,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/drift.857c62a8.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/drift.857c62a8.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FfZpAZtrPwQQXjZnUKJ%2BJaCAfKnosNIF0ziXU2cOrH5xB0acbBDYXr5kcfuSOe9mx2%2FyCWR9KBklKeKRtq0WwKWSoIU%2BdOWeAr8Uww%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-2d34d\"\r\ncf-ray: 97978df42ae2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"857c62a8ad5af01c76c2dc7cbde52d1c","sha1":"753f9bbdea19e2c773babab183344bc51eedd181","sha256":"0e673be392e790ccdb62e079124096be5578bb7353530d93483383ca780b37af","sha512":"3d1f2676942720db29bde00586189db0cfffde0ca5110473ea9380e97a207924b1eed71a72dc0b7e77a44ca61b802f141e40f620bb43e23e28f164460b48065e","ssdeep":"3072:3Uhmnb2KVE6no5OzA0cREQraPJElia24A7RsZElIKT0Jt5cgWJ:Eh42yjno5vlEQ4JEV2HRlIKT0fWJ","tlshash":"260401b2637eba4b63478ea19112ad540eb6b993655ce1c8fecc241620fdd80fd41ced","first_seen":"2025-05-30T09:49:47.006662Z","last_seen":"2025-09-03T19:13:04.729103Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":948,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/optiver.3d541aae.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/optiver.3d541aae.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N34GwMTB4oAreFApfKi%2BolGNsv85xEC9WnGcTO4Lgg%2BJjIMu04dS0tzrfluVpeIs3izV4kJ9RQdfN0%2BlPdOelFd63nL8N5x8zMutMw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-c86\"\r\ncf-ray: 97978df44af1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3206,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d541aae1605f0a4704549948d4e9c1f","sha1":"b11631247b27dbfe3e0b2cc8ae36d1414f16b4a9","sha256":"80a0395e5669cf0bf130db975da79c3d3c53b011b434ed8e5083a2c85e08b5f1","sha512":"4ed25f6d7c109a6b03af232f3712eff08ede7a8cb23315a43b002408f3a30c2a2dde578de3a4b3fcbcf0578158cb551205536427af4dc3f540449d8ea3be3e99","ssdeep":"","tlshash":"8a61e18a72cd32d2f883f3f51f19a0a0352758fd2606c1945261ded1d9d97ad4dccad0","first_seen":"2025-05-30T09:49:47.010546Z","last_seen":"2025-09-03T19:13:04.783838Z","times_seen":14,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/register.c8264df7.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/register.c8264df7.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcJa7ejSzTu0gUSL14QQc8B4fDnxM7YByYfDH7rdxR5LrPvNIeyDhsSgxQaaGKbUmNJ1UUwCPVMAoz2TCXtkAYIf%2Fd%2FXlXBurb20oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-38fc\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e456efb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14588,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14550), with no line terminators","md5":"89e40ab7509d006949e62ed55d76cc83","sha1":"0c20f3199af60826ab7a12413848c31c08e54af7","sha256":"3e6e4c26e4bb611b42ee8e6d205700e08c5ea16dc863b5e1fd09233ee9cccfac","sha512":"8f4cf3e1bfea879fa6ad525df1cae1c0826ea14803ae4f5f07a72acff0e865288c53ee8fa4a68e32066a3f6efa4497ed6a92d1a19a0055e21b538d42424c6904","ssdeep":"192:SV8wOqbSJdKhX59hT1Rzj01SPH28s0nJd+5gxTFta6G+lrAdb6wyIRNAT5nm2lpg:IduEz9mUJs0JgZ4rEbbxzAlps3yAxeAN","tlshash":"0f626509f061fc97046bf2fa75370402f1f55d04e866f260a76cedd82e3ac99a21ea57","first_seen":"2025-09-03T17:29:31.770136Z","last_seen":"2025-09-06T16:35:34.066229Z","times_seen":11,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T19:11:39.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 19:11:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JlTGuBXaqXaNOchAHvR3I18CBez8Uhsp5Q2YP88vTwsMP6xXTfs1pfufLVfKpkuLLk%2B72uD6YNqo0Dc006DCWzaD4teJwW%2BN6A%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 97978de10aad56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2411), with no line terminators","md5":"c3611f5c5fe40a8290a33218c60692d2","sha1":"7f5dc263a2cc2906450550bc3551bcfeb771c042","sha256":"f7d52b80abefb75653002388dd7020f57e890e357825d973ca09f4183bdfdf5a","sha512":"83485bb44adcac5eed5d9c1708d7384559b742fd1da5e9d5d71f3efa36d9b2a86018eea45567aa89ced71b7b093cdfa407f143c28f7f6ae8853ea7b413b3fea9","ssdeep":"","tlshash":"8741d275d48441ef69306b37ffa8b7e8c18aab4c5831d82085758f2ee468bc88366497","first_seen":"2025-05-30T09:49:46.98862Z","last_seen":"2025-09-06T16:35:34.0133Z","times_seen":15,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":65,"dns":42,"connect":1,"send":0,"wait":513,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/12/b0109b7562d10b60.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/12/b0109b7562d10b60.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1511\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F0AB4B81353812731C\r\nAccept-Ranges: bytes\r\nETag: \"3DE7E8B92CEE01F584EFD6F21B60F684\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4073176230142898668\r\nx-oss-storage-class: Standard\r\nContent-MD5: PefouSzuAfWE79byG2D2hA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"3de7e8b92cee01f584efd6f21b60f684","sha1":"138625ad8be6487912fe370bfdb92c7166eff639","sha256":"03b529145b9e890d25a2cbc5faabbad15409afc2600d23ddf0b74c1fb1e13dfd","sha512":"4dc931cba090da60f32c84614b8df2566ad43551d456838588948d7dbdc9cd74abe6e56773dfbdfe9d390362487f0f955a715f64fddf7f06e6a5360c44ed6c53","ssdeep":"","tlshash":"d731f963392c968d7bb157d22fa4f8b1bd150c892a367118a6b6c14878d8038f493813","first_seen":"2023-11-27T05:56:09Z","last_seen":"2026-02-15T05:28:38.292958Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1939,"timings":{"blocked":836,"dns":38,"connect":263,"send":0,"wait":265,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/contract.d30e9ddb.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/contract.d30e9ddb.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ9ujMnGc4fbdJ6bFytxb3oG4AGEUJ%2But6aNVwpiLCmkHN9rkinJbG%2B%2FGB4v%2BfSELAkrNYIGrkNndlPHONhWi2rHKcO7%2FMtXLUlDrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-17b3b\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e42be81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97083,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65513), with no line terminators","md5":"7938339b152341e00998e47c21ba021d","sha1":"5600821246c780285a2371f753258183e5b766ad","sha256":"104256289a090a1dfa0735800b4b6e4f0436a34458b8d8f3b728516d6bed44e7","sha512":"688f9f47156fc4fb902cf824c4af696645e078502b5b83a599cbe436b03d09fc22aea299f72d3f9af4da1fac330c9ca0aed666b2d01c3569a0ce7f40e1a55a5b","ssdeep":"1536:RFJh72FKE//nvgT53Ffptbssi5aq9vVaxh9J35/FTdMlgA7WBuHUi:RFvyM9J35AHN","tlshash":"ab93a446b016fc9522bf92e7042b000ef3746b72f059d470b5a7f8dcbb6dd44a21ab66","first_seen":"2025-09-03T17:29:31.75646Z","last_seen":"2025-09-06T16:35:34.062231Z","times_seen":11,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/thala.8a697901.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/thala.8a697901.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2O7Y2nAM3pxZEyo6BdnUKZcCgFLFDW3SWNTlbEl7pAGgWWMtsGBYTNfdt9nY4pJGJmPinob18iRhOf%2FOLzpTCMNfTtSMHxFpexcJA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-11ff\"\r\ncf-ray: 97978df41adf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a697901ef7909b69ef57ee1d9897082","sha1":"7b6dafbef4aec7494f5acf8fa53f2bfaf2ae6732","sha256":"f02343ce7b26360caff05bee831a12fdbff694ee4699439044255df44cf851ac","sha512":"b1121ee3ed0e9de46aa27f14a524b356c584a9aef240c865288c96edc1c32c826d85ac270be3e50df638d39ede4d34b587cae67d61f0628525045a30c950b7cf","ssdeep":"96:OnaMbtXC+j4d/aHpotgN4fmQMkXt9dBLMaOfpdxq3dB53cEbq32UgagvTdM3:ObX25ZffmMdBgaOh4dK327bm","tlshash":"5b9164e923d863e4e807f3e0df2b64b5792a34f97b4dcbb5c254ae54aa0505e5c848c4","first_seen":"2025-05-30T09:49:47.028337Z","last_seen":"2025-09-03T19:13:04.75099Z","times_seen":14,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/polynomial.988d6b6f.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/polynomial.988d6b6f.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfAFa8kWVWxMGXFaZVgkCcMByKw%2F3rqxNwL4v9GCK3SjD9wXLAXChmJjPIXifBm5rQhvQSRPWvkAf4hVOrBw5x03TGWDcN0hm9G9CQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-3eb7\"\r\ncf-ray: 97978df42aea723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"988d6b6fdf084fbc70280fd7cbf58587","sha1":"47cad54db5eead3a933497484a9e56b86120e682","sha256":"5fd2366a52f28d62310a18e631e5cff194383a7c45d2d24c2eac4314496dc972","sha512":"59e0487635528176ed9056c1d84f0650e28718a40659fe9f96e739c7d95efc446370c76672639b5d3172ca5302313855780f67553c71db7f5df4c6dc58b90167","ssdeep":"192:x9y/0Wasl+4snzF6vwFbbOupHIVeE326GP4sSstUFFTCMjro4SmhSnFjQR9vtvvS:xIgwspIVeEmLeX5emh5DvtvvS","tlshash":"b272b8f5a7e1a3f0b506fbb4e92260e5764f34fabb96d790c1648e94652209cc9cccc0","first_seen":"2025-05-30T09:49:47.015259Z","last_seen":"2025-09-03T19:13:04.745246Z","times_seen":14,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/staking.ca7dfc19.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/staking.ca7dfc19.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67q79mhwYlD8%2F83SrmIJsvfqMO64kyzHQKWw%2BNN9WVtTKtxleWjZvhnP9h55hIfcQgw7ljhrIl%2BucGsMINIWCMd16JW5g6XVPm%2Fddw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-2e7c\"\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3f8d8a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11900,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11900), with no line terminators","md5":"da18208fc91d54df47b0d54c027e0ac6","sha1":"38156bde37dcdb36f07270e554cf04d4aa6cfd5f","sha256":"58874b83918705a86d7ad7a3c692bbb4d83739154b99f9ebe819eafb3561719b","sha512":"88844ffc9ed660f125d00dc5b26ae60bb0da3e2d6beea7798f30ad0d07c0779db342182578bf2a0b6773694f0defbfa9e0cac8d97e7f3829aa5c7b0ac7d52fab","ssdeep":"192:vPsbzpQV4lnqsqSQwQBp4qsqN/rNH0q0QAHUD3BH4u0gEXUgkjVtDV54E+d98kyH:a1lqzdrB5zN/5UexY5034DG","tlshash":"53325355d060d136f87784a372a47a8c70d6d403d9224a7ed2b73a2bd9d727733227ca","first_seen":"2025-09-03T17:29:31.733047Z","last_seen":"2025-12-20T20:14:53.770862Z","times_seen":14,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/logo.24a977b2.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/logo.24a977b2.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/css/app.598900c9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGCp5QadHjouFindIZ6ARtC1B4nuYidsr%2FgmUSwxsC1VKWEbst69FebIUZtopc33YRkK8dGCnh0dnvPnxeykaFxrJb8%2BkxEB3cGGOw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-524\"\r\ncf-ray: 97978df39abf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24a977b292ecca3fb674c681e9864c9a","sha1":"771f4b5b482bdaf4bdd8b2f12c8d81ceeed9a6ed","sha256":"6d6d41f21934792351ed5c8f550ed9e814070fe84442af5adb8fa670383fa306","sha512":"02c4929bea4374238b0912366cbbcaa282e9549315134df3cab80cd8306801183660cf1b19f45b36913f36934ed2985a25d9e94aca3b612093332edaf910665c","ssdeep":"","tlshash":"822120edab623cbcc5df5b6ed77b9090931dbca87f831144a20dce1ac0d0944b90ae52","first_seen":"2025-05-30T09:49:47.01626Z","last_seen":"2025-09-06T16:35:34.073352Z","times_seen":15,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/polymarket.33d3a774.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/polymarket.33d3a774.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBBTyOjjGlhB6aSFhZWkGgXKZXcRZh2Qapy8aaTveHCeemRK0r3%2Bb%2FxwnkVvqmFDJk961xCIqvn51I%2FY9lSkCKoscPs%2B39eepcEYgw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1a67\"\r\ncf-ray: 97978df41adb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6759,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33d3a7743b04d527edbcc7c934ef2009","sha1":"edef0cc7e2debf49614e20d7a00ad2f78a795bc9","sha256":"df74b756fde0ec8ddd2b5462d8fb6848981c103ec8ccbb322666c41d55618aea","sha512":"44e48ad0183be418231516304507c6fca89b998f9aa093f1e002dea76095d813f9cbbc8febfbc9bdcc4a1d80facc705e05be91905908eb67372ca759a713bf59","ssdeep":"192:kxs0uQv21IONXqp0kTdLgvfb3Gicy4wLkLrO2N:ExuQO6EkTNgXTGiJALr3","tlshash":"66d163ed2b7409c59dc883c2be0a8159692bb1bb6e164728c11cdfb52845caeec41fc6","first_seen":"2025-05-30T09:49:47.027245Z","last_seen":"2025-09-03T19:13:04.737975Z","times_seen":14,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/solend.ef458894.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/solend.ef458894.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17%2BCOGP2bbIX8IZnyYTbuzQ7EgkQPc123tq6zP0mw6n5EQacctc5ICQLEBhDdqR1qMQQfsuFHqDmW0oKASuy7x7DS24fTObrb74UaQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1e82\"\r\ncf-ray: 97978df42ae5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef458894e916632d3cf802ced9dd2917","sha1":"b9c4a4397e57bab7e891a394749c0893c0c3416a","sha256":"d39d3666eb01ecef459c01e22df3c16f404c7448081c94b35f7440b6d9312415","sha512":"5437f0c5fa6c13df46e9f87240e486e6d54e86717926227f84f7b898109891abcbe17f59de60432ada619210751ccb7ec003a9e57b43f94912c343d39d81eb5e","ssdeep":"192:jYK+7m2sPB9p+sZRz9KFiM/pQ/sz7JEmKjZlq5uzgo5X9C9Bq:ko2eTZ19KAKQkxQMoiBq","tlshash":"a8f1b5f233a8a1c8e503ebf9cb264471a55a3cfe7fd292c0c361dd059a610658d5ccca","first_seen":"2025-05-30T09:49:47.033889Z","last_seen":"2025-09-03T19:13:04.730711Z","times_seen":14,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/cms.4c8a3477.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/cms.4c8a3477.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvHVtkeovFafiN8emTpZHn33wrJiS%2B%2Bp3TasbDZM%2BrIhKbmFGy%2FAn3I5o4bdbZ05cPYtS4uJYwSY%2F2RkFcScIQtmwE5RwdtVmMqTjA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1b97\"\r\ncf-ray: 97978df44af7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7063,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c8a3477bda2c6b112a92f4f228ee763","sha1":"24503e714826b2a9c3a7e025e5f23a4a43a009c0","sha256":"91c771d48f602ca077eb202034fab7faf1b9dbe4de3623a086f35c7f76a12049","sha512":"4ec256cb1593d045be72313541bd8d8d5636ec1c65625cdeb93eb136076091f87df0aa3f821cba066b8b00caf65f1509389d1bbbc33775fd0326fe6881c0a7e5","ssdeep":"192:lzOXblwsbi8g2EA3yBhciXC7MzTAIYRjMhL:lzOXb+sXN3aP1/LhL","tlshash":"ede1d8e9576ba3f4f506e3f04e2591b27e2f38f67f95c2bcc256cc4096514ad498c881","first_seen":"2025-05-30T09:49:47.023665Z","last_seen":"2025-09-03T19:13:04.751912Z","times_seen":14,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/efec.0f14a194.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/efec.0f14a194.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HScZNvP4glCAlS2D7HqHJkZnitvgKvkDScH1CqMtgzBZ242yya8gzM4BlZhFP7IBVvnNvU1Qyp1WDkV9Ws8kBzCKf4yPDQVvSTidYQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-30056e\"\r\ncf-ray: 97978df45afd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3147118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a971b2f844f3c4ad50910c68f4712e32","sha1":"b2ffe0e6839ff2921c1c455e6f680c70c1adfb76","sha256":"ea3ae0482a61b3fb81d6e2b6b556041eea5d2941320abfc22c4dee100493ba15","sha512":"02fd54e2ada5bb2aefa77784936da4d80a1eb45acfddf84dbf06bf310983fa936ca6206cad7b4c5ababe2be9bda85bd5774af805db3b31845cdf202fca586d41","ssdeep":"24576:6oKzmJL0viaL0G1iakigGgjP+aRxSNqohiCSWp:cOYgj2aOf","tlshash":"b025016d9e1daecd73a8acaff712083d291159ee908cc4dfe09e3aedc19130c9554da1","first_seen":"2025-09-03T17:29:31.67724Z","last_seen":"2025-09-03T19:13:04.765768Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":10798,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/orb-new.2b741a10.webp","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/orb-new.2b741a10.webp HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117074\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c17649-1c952\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVzKR9ZZziQB0TUSU4fcVoyGbPVjntREv2Bel7zJK2yP0H0rP4zHK9nV4uki7OXJ9l8IlJ8V5T2oMb5PXe6OUwURdcTDQF18bft%2FlA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97978df47b01723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b741a10fcf4a2e0bbfa23654c423e18","sha1":"80ee814056296da2c3f7316ec55f39ebfceaba96","sha256":"482c638b7822ed10268d0984d1c0d7f6748b9509e0f8d7932a76f964867d56a4","sha512":"51eb58bd5f9e37524a442b858c389e634f2103d3296ced87844fb35d26f356e6353ed262e6bdf15e9e37507605e4ca08e2d2bdd6acc9f778727386148cff7ce0","ssdeep":"3072:XMG6c3y6YpnheewSu6FjJL4NuHQt+s4wL:Xd6c3Mpo6Fjp4NuHQss4Q","tlshash":"15b3123ec0f1164cf7ef346f2d1025632dd34e16879d53a60059caef9ab0a652683a9f","first_seen":"2025-05-30T09:49:47.001714Z","last_seen":"2025-09-03T19:13:04.761918Z","times_seen":14,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":683,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/assets.52263580.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/assets.52263580.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Qynt%2BlYOd71bGZR4B7jSlMv3IcT07xFu84D35eRXLudk%2Bv2gC9zBvOZgWtmpPvupJjKRXyig9WspLy%2Byz6QjByw%2BkNqZ7D6QaXRQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-162e\"\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3ded49723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5678), with no line terminators","md5":"69b9e2649ac746d769ba5fa2c000656b","sha1":"2645dd9664a4c1c6c6ec3e0a276fe0a9718aa033","sha256":"26bd63d8a947c4fb777583fbe61f1bdff446d8ba80ca75cea8883ea44c46ca4b","sha512":"cbcba413a76204b3e907330a4856d51e87e815f562947a3e94d4d466f325da2ce943a9e151806d9f183699cdf1e3cc67372b079a72accf21e076d7e6ce527e68","ssdeep":"96:rXHAmZlWncC1mo+hOhe9pUsukEIQ1WQRM:bnZlWn0Gsuk/QwQRM","tlshash":"dec1c133e31d71457073c866a0c0bf4a6270e3bb19636f25ea966d27ce874a3372175a","first_seen":"2025-05-30T09:49:47.008608Z","last_seen":"2025-12-20T20:14:53.735383Z","times_seen":15,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/c2cDeposit.391200f4.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/c2cDeposit.391200f4.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HpzOjKuLC0SQY5NOL%2FSPAMTS6023wIDWOJPy7u0iMWufA0atJ1zwR73JW65ljef%2BakfPbOo0YTJBVFM5sdaHoCd7Fqjhj2kXv6%2FPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-c12\"\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3ded4b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3090), with no line terminators","md5":"d402b59a0c06914faff602e4292ea6a1","sha1":"c9d2c4c5b0567954c34e00f69a9570df1b668fae","sha256":"75d0a99ced79c85bcfc6ea109fe4d9befb28e83ac0248db9d90de684c6dea59c","sha512":"71e5aec0fa3167df3392bca2bfc2147dae4644eb868603f1d85d7c760bc8e0f10f3569238ec852688ace5773c8bb11a9191d5b35bd3d6af8a4ccc87668882043","ssdeep":"","tlshash":"af510015326c90ada03bc46be4e86d4b2064ef031313066fba26d45ede83447369379e","first_seen":"2025-05-30T09:49:47.000764Z","last_seen":"2026-02-15T05:28:38.241183Z","times_seen":16,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.37ce905a.woff2","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.37ce905a.woff2 HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/css/chunk-vendors.1f1eed67.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 121680\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c17649-1db50\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHFw0YDA4xTcE9K5k9SzfP6xZNZ22k2hQONw8tFni4PzPiRJGleR2ILuHXxpB7cFWlLaFN%2FQrIVlF1GifwNRdMQNZ6KVfWoWywppkw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97978df3aac2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121680, version 1.0","md5":"37ce905ae8ba1e0d17c9ba681e6a0af6","sha1":"fb96a01476dfb2d93d699849e94ef307b4899ea5","sha256":"18246c6c8bbc52a0c984ee8593da73b39b0246f3fccade05af7a282823d26614","sha512":"e8acdc49d6040aa23c24c83add56e40bf5ea92be9d1f912a3d59faa412bec6274de097cccfd5a097cd8afa5324a2957ad39659346cd09c5604f9e89f6045bfe5","ssdeep":"3072:AuIRXX65KaBLXQgSFsmoMqX34Vktjpnj+RVTv8sCox:AuIRnIlLXKsmJqXIGd1qDdZ","tlshash":"53c312b20173b5f892576fb601c71dfff6251b33ad164a8dba54f68908109e20a8f637","first_seen":"2023-11-08T09:08:22Z","last_seen":"2026-08-01T09:36:48.243247Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":486,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/flow.c2e4d98d.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/flow.c2e4d98d.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwjHwdmeWC%2FPlT7m6VBKlAVbrt%2B0DQ2Q7zYPHH1VO%2BF8aVDVW0P%2Fd5%2FViLFhLgRrZ6Fo6rPc70dTafqJ75gwxJrGJJkX3d0hTeSgJA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1024\"\r\ncf-ray: 97978df44af5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4132,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2e4d98dfeb9472a1ac8157529e24373","sha1":"71290378e173b065b76ab406f6b59fc0bfd96964","sha256":"38e62ac3da3a2cba125c4a71207c30578d6b9c2c7a72fd9781cf9f739be45a7c","sha512":"115e6d5a0324ef641949c80ae90746e52ffbbe198c99e21f5b972bc8007e0d6785f28f508a97211d9c74195aee1fdef037445748a515ef1ad29ab59fe305e449","ssdeep":"96:T4V5vyqfS6hhPszechxVgDDOb6+e3efe9cWFgQ/p:kVJ3/hPSeclgDKBeOfkcWFrp","tlshash":"c581b5fc2b0051f0a94f8eb3fe3399806e25a9bfbfc1d790d281862998744e04505edb","first_seen":"2025-05-30T09:49:46.985435Z","last_seen":"2025-09-03T19:13:04.727601Z","times_seen":14,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/12/538495d69262322f.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/12/538495d69262322f.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1090\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F08B90443636E2B4AA\r\nAccept-Ranges: bytes\r\nETag: \"0B597434892FFBED173102E2B2749168\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14862946131725017478\r\nx-oss-storage-class: Standard\r\nContent-MD5: C1l0NIkv++0XMQLisnSRaA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"0b597434892ffbed173102e2b2749168","sha1":"dc744dd16bee8a4fe84dd6f0a2eceb80afa97ae6","sha256":"ed6cde17a5cb077014aa96591ff333faa393cbc87d279681e576f1dc57608b75","sha512":"aed3d9e5d165412d102712b0f6e91ed2996769f4a68cf20a59993a42cbf46e5a26c57a5213e55812d2cb20bf9fc5e4b706360d968be39f3a88e72c26becc8e07","ssdeep":"","tlshash":"f511e58ee79c447fdf34c87b8b726040fdb8243961018202bd36543e0a3b3197836a29","first_seen":"2023-11-27T05:56:09Z","last_seen":"2026-02-15T05:28:38.281686Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1984,"timings":{"blocked":852,"dns":33,"connect":273,"send":0,"wait":274,"receive":0,"ssl":549},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/account.5abe76aa.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/account.5abe76aa.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rp7%2F7xHvh1%2B8iz36kuGqZzeXyayarIBJTFEYz3tfZFRY9KfsBakNfoWAQ7OCN%2F8EfYC3pYZeizKqSItKCCS4CL1PiyCurgOb5bIRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-3ecb\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3f9d8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16075,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16067), with no line terminators","md5":"3b05b21a6e79872e67e6ba208b222214","sha1":"45315f34900221353355b919e9151f0f67d0b3d6","sha256":"c35918e5971d7e1ab6d9543b4c7ce9d633c910d026713e1b8bea121d73bc9e63","sha512":"4ffedc3c8267aaaa13d347974799bcefb0e55cb6d369044c39222b889c93c94c310a76d78f3db8f9ae6ddbb1c9bc66bb3c68d4905f24531af93e981115485f84","ssdeep":"384:16dWInMaaXsKY3cAq0rVS7qeXHq1yS54H8DjYR:1NInMf8bcAq0rVWqKHq1954cD8R","tlshash":"f172fa45f096fcce24bbe2e71036100cf6716e84f457d021eea4fdcc7a65a886319a8b","first_seen":"2025-09-03T17:29:31.768231Z","last_seen":"2025-10-25T00:32:25.373474Z","times_seen":13,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/privacy.1a5d3373.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/privacy.1a5d3373.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0I2ADQEGRapTxQIQJsaTb5eOwywrAraHn08EYvm4ecEiaxfDJMeu8WxzEco6YYKSBsa47%2FgcEfwR4ZASvJl2IHv8gx7%2Fm%2Bix9VRwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-dd1\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e455efa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3537), with no line terminators","md5":"777223224b56d4657dcab8197559488b","sha1":"b2ac071215a030f26884531ce193f82138e99054","sha256":"5aa6bb415b0d682dbc35ae5ca698f7e9c61839defb59c182f80f11620ca16895","sha512":"d7f98ab56f5011ac7f089e343ab2463c7cdaf86f31479e17afee3beab65ff734be7428d6ad0b9e5b7e65df085c1f3a26901cac042799032cb46d36f9df1865cb","ssdeep":"","tlshash":"b471416a7066cde47cbcb1ab0d2ac60df6f026c5a071df3491c8fd8c6e27d51601ea92","first_seen":"2024-08-19T20:41:34.034021Z","last_seen":"2025-12-20T20:14:53.741216Z","times_seen":14,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/app.3212260b.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:40.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/app.3212260b.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Mar 2025 17:36:17 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhBwMl03r2uQnvSBpm7mmkienTdQOYSBnw22W5r%2BnkreubxEYK6iOtiu1bDAab9kP6m270zaFYuuEFUT0tEe3x00o09%2FVDLNY9qFMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67cb2e91-82cf8\"\r\nexpires: Thu, 04 Sep 2025 07:11:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978de5289c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57841), with no line terminators","md5":"e15cae9bd721504c485a9083973acbdc","sha1":"251a0cc83bfc7e2fd158103aececd940759fbf6d","sha256":"d24b66e9f407e3fd047aa84ed7a7043faa5711e2884e9b6cbad36b049c861804","sha512":"3cbc9a040812efbd7da504dbff0b7433e434032638a68766ea59625967a01b39054950278b5acc3a005dc2f355ec5fd34f92812cb1b4057e0e69d654f69b5582","ssdeep":"12288:k1QzuByi4BWuKcaJdoCj0sZv/BjoGm4ikJKunD6Mr/jWnOuHmSDFbJNMwSDJWG0i:jCIrNMwOJd88","tlshash":"38d45b87d1c797364baa52e8289533d6b1fd818793898e3b87fcdc9c227dd2870c9851","first_seen":"2025-09-03T19:12:06.564146Z","last_seen":"2025-09-03T19:12:06.564146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":967,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/apipc/home/config/info","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /apipc/home/config/info HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\naccess-language: en-us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53L6o82X9sSuIK5QJau4YghCGc0nsYam88y1xaVIRkyLiO%2FyqvHpkp2jQH0hCEugbyTElhZSVUb8n5oF3I3%2FCRuWWxVFUGzF4Fwvcg%3D%3D\"}]}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97978df3aac1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f094eb0cb2a62824403314f58462b4dd","sha1":"fa8f1557694e9f19ee6bdbcf56adf73d1c42e180","sha256":"35f5bdf9f16ed4dfb62d6722566449b9d441d3514e308b3c820498fc1907fe2a","sha512":"e7751b490fe3a45a1846b09720219c536be54b2a8bdd4dd8732bdbd18e54d1683c9c9cf73e206862c6fffbd912a720a246fed3cc51968450584ef512d523788f","ssdeep":"","tlshash":"63f09e6e35e44cbe41f015d1081f646e9a8f701f2d48e9fae2cd595d15264e2100f47b","first_seen":"2025-05-30T09:49:46.981471Z","last_seen":"2025-10-25T00:32:25.323419Z","times_seen":16,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":452,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/hmx.1d9d7b61.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/hmx.1d9d7b61.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toiGAaTaNL6BweitR92Hz8i6ydQYWFTTtPyg3VHGl9qmWyWII5rgn9GwCzIsL5cUyAQO%2FJC3%2BJn8%2FboLT2kxvb49rmwhC9ZBcyLzTQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-5d8\"\r\ncf-ray: 97978df41ad4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d9d7b61884679e0c8cfb14e7b17f07d","sha1":"5a3c68028704bdf96b03b43b5e2ba97a8b58553f","sha256":"8bcfe47777394a348c171ab54f4e1afc9e9ec0faecd402919f618d7441ebc8e8","sha512":"9f76c78beb2bd41c671e24d57412ba345863f0a3716690c5361d5c1332b385d90806b1f1284ddbd8f00585c493ca6c13edda1b01a4bfad94b7a1c35a168e4a40","ssdeep":"","tlshash":"a23110e4a07c22d5ed09dbf8c71e4071f06978f62545c7a1c2693c0824e552f9c7e6e5","first_seen":"2025-05-30T09:49:46.989651Z","last_seen":"2025-09-03T19:13:04.757998Z","times_seen":14,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/jupiter.e392cebe.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/jupiter.e392cebe.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=37KMAD1gBUUW%2BHX0c4RyndxYU%2BX9PIYzd4w3rO8yrpr2tnDhsZFbdqtP0Ysd84bW%2Fw3bpFshVCax2Bo4mFW%2FMzbgDRBcKt2a4ZIGPg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-188d\"\r\ncf-ray: 97978df41ad6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6285,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e392cebe29382b6954a4de458fd76424","sha1":"f5cd7359530f8f4366162dfba7b52f0b6dc26b14","sha256":"529cd1938f7a323a9353b12f9c569f1c1ad18cb544eaa98592960d8354e17265","sha512":"0ca19b129782ff8f3e812c466c6691d466efed4dbe128ec8b5959255214afe29f85d3e8aa46b3d5be3bc6ba46d8e8cc3f54a2a15b0dd72f045efc05f812aef35","ssdeep":"96:MBde1AqfPFo3YAG6JctpeswRoIKCc/V5WoaWMPwgpWPFiRySyX3q62VDkqUhtDeg:iemYRMASNo/rWRWVQcPXryhU/qgyb2","tlshash":"1cd180d173e993e0e501e3f4ca2b24757a6f24fd3a45da34c340ae60b94622ee8dd9c4","first_seen":"2025-05-30T09:49:46.97851Z","last_seen":"2025-09-03T19:13:04.754659Z","times_seen":14,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/app.598900c9.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:40.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/app.598900c9.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9q22rGTIdq7WfJFsZowU4lBT3OAQ0IQ13BOw%2B%2BmZOvcHioOON72115WOU2L9sZB5bFq626mrSV28BhdtorNAFeXZ%2BFdfASf5HjMYmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-13ea7\"\r\nexpires: Thu, 04 Sep 2025 07:11:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978de5289a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81575,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e495e2c985f5ddf4f95e6ae9ba0906eb","sha1":"528bd3c4c6ce0d5fed3d4100707372946211a0b4","sha256":"7bf3e74aa559759a33782d7409d7a6027aedeb7fc1c4233bb2ba50c966915f90","sha512":"60d70111aa2522246658837ea6f7b613c32b20fa959404c447f299709c9c46b6dddd058748d595690046e8cff0357263d86f2fe7a98ca65d52f2cebeb6bd3418","ssdeep":"768:hEUZSi1pvyIctNlxSvYxE8QcsnxRlZii3xunkRTth4WdT9Z8G:Wti1lkxdu8jsnxRJBckRTtCWdT9Z8G","tlshash":"8b83433d3a0dd0182077c896e081bdced610b217a6feddb6f6a23c248f77eab1a15515","first_seen":"2025-05-30T09:49:47.031626Z","last_seen":"2025-09-06T16:35:34.072673Z","times_seen":15,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/numbersbg.61cf446c.webp","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/numbersbg.61cf446c.webp HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23154\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67c17649-5a72\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2Aq9OSYmHzPG2bFwZ%2B3Uhuic7vZ9BEgFr5FbxSlLKktqInJd0XuGCakETaUjgjZjKcwfFRAmnurhTwLqnMgUUVByeZaiCqMRK46qw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 97978df42aed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2098x1078, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"61cf446cc3d6aeb37802a14849ac5c9a","sha1":"a358e5e2be678092d96a9ceea017e122102e6c35","sha256":"06dcca1b39be94ff64306631c5ae9348eac3641e90abde89ea82ab174b7b3a26","sha512":"846c5c02055f4ccbcdf42cd2f9bf1ea5355c8fc164b33de9c96b8aea3edf1b02b238f85a3875c49e5440331b99804dfd580f5ed0efcc571d6d640b66e16c2989","ssdeep":"384:9dEGLiECKSLVlQwzuwoyANdx08lwCtXGZAEfGDXawvjtE34a3KbwRPBX9:98KSLzLzuwoJdlFt2NeDXXvM3KbwXX9","tlshash":"e3a2d174b2088476715e440adda485a7ea737454d2277d90af6ffb3b021738a26d3733","first_seen":"2025-05-30T09:49:47.020089Z","last_seen":"2025-09-03T19:13:04.774929Z","times_seen":14,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/cboe_2.97eef113.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/cboe_2.97eef113.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtUrM46E8AKHuNcHU2HwByaScA16qTvASzh%2BDPUPho8XRJI1SgRd2IxjL3mxRu9%2B716Smg1kVL%2BOz3HCBqsEm9%2F6HMyY465rYsGcrg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-a07\"\r\ncf-ray: 97978df43aef723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97eef11377cec52698dd9ae3596726f6","sha1":"ce9774e94c711a194d46fea4996edef80bb71259","sha256":"fb9af455195e05b1d34617336c78db33656ddfca3ed6955c6680dbd219c8101c","sha512":"75146fd05362ec0d9387b4db374604071cebb822ef84055f43ad7730dd33bf900432cb2e4e7d0a8d6cafb00ec962ae468b98e17fbd061f0037f7a12f306e43d1","ssdeep":"","tlshash":"c25172e903a8d3def205e7b15a3bb0622f1a35e0bb178bf8c1d35d00aa4817e594489c","first_seen":"2025-05-30T09:49:47.029555Z","last_seen":"2025-09-03T19:13:04.747191Z","times_seen":14,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/jane.1ad2757b.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/jane.1ad2757b.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8GGI4osYxUIUyGdcI7Xruueqc5ndYeET2rKX%2FSPD58GmphPpYqi%2FYYdubMdOxDOCimTzxQMAhKCWeWE6KTMiLmn1Iwzj7sI4Ls89OA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1af4\"\r\ncf-ray: 97978df43af0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6900,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ad2757b612ad5f52cb4678352a3efe8","sha1":"bc562a148cd92b0f7798e2f7ccea0c3fb694a49d","sha256":"70c6237d6b38667d29e2a7db75a735ee5d9621804e0eac78cfd4b0e376b444c2","sha512":"0b5e16d12110022bcee1ba66a69aaa4989d734510078a5262c06443c8cac79f6fa2590bc1063dc032b4c80bd583c99f2afc9f14c61d3e64ff476e3e5a0a0fde7","ssdeep":"192:o61fpEkRCBtwLvQVTBW2t5XU71wBXdoNxbdMWavoh:dL6twLvQLW2tNU71Idq+Zv2","tlshash":"dce1a5e963fba3f8e145f7d8d6225074352b34f73e26da58c6b29d96b90605c8acc4c0","first_seen":"2025-05-30T09:49:47.017819Z","last_seen":"2025-09-03T19:13:04.770761Z","times_seen":14,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/wintermute.f099b2d6.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/wintermute.f099b2d6.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgByU67XfQynoxoS%2FI0DnIBrRiuvC2WxAVQAP2HDsSh5BGsr%2B32n57PFVgsO%2BHJUUei3nQsGF8bQ%2BaIfa24teiNthiH17oKEbNrzbQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-2a0a\"\r\ncf-ray: 97978df45afc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f099b2d6dbd8e7156b799ec30cc75109","sha1":"a496ae277d4c01584d6a5f4329dd33fb843bbb12","sha256":"09a39783a7639ee8244ef0153969d497de30589d79952a511ba87448cf86d943","sha512":"325931e25246bf3a62176bea338ef528b2d31f658a0297d226ecc16ef50b0e7755a664b88759dca11f9109073075ae44c6131cdb3d80fca6be6319731aefcf5f","ssdeep":"192:mL72J6otJg7iAS92p9FQiq7mfLo85BGae+1u5/h1hGJKP91rRQj5iN2j6:h6BiAz9qis8zGae+1u5/h1hGMPrRJN2+","tlshash":"d02273e5769563e0f400dbe5ce3268b1a59638fa7fb4d2e942c4b929f76349c8c0dd80","first_seen":"2025-05-30T09:49:46.98646Z","last_seen":"2025-09-03T19:13:04.776925Z","times_seen":14,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/12/fbb0309dd58dbad7.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/12/fbb0309dd58dbad7.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1468\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F04C8B373338FE3540\r\nAccept-Ranges: bytes\r\nETag: \"71685D563D9618874CCE6DF7AAB62C62\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15881959167172924585\r\nx-oss-storage-class: Standard\r\nContent-MD5: cWhdVj2WGIdMzm33qrYsYg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"71685d563d9618874cce6df7aab62c62","sha1":"e12f22195cbb7d26fd2b47499efb8d91d3b05a8c","sha256":"444d879c972979c574e38824c900e0440982de745dec04e3d826394105399591","sha512":"4824c088c25e2b88f9f9d3f45d59c1a767ad989c1fa0805c61be07d8cf1e2aa0859883ffd31b88e996557886c8f981324e1f9707b8c5d94a6d137e5c41298b45","ssdeep":"","tlshash":"2f31e9866ae98c72a50e7b1c056807e80d84bdbd4ca5bbd22fdf545c07df44433c2023","first_seen":"2023-11-27T05:56:09Z","last_seen":"2026-02-15T05:28:38.28111Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1946,"timings":{"blocked":836,"dns":37,"connect":266,"send":0,"wait":268,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/account.1f4149d8.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/account.1f4149d8.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2FXvbumvSIMtJrzfwj30ztq7dRAGzWFFarV6pQkdQe1tF4w%2FJd0A5NBm9iiG3O5jQi2wI2%2BfmIfVsHXoqy5qyIXRvPIKuitbZ4xKuA%3D%3D\"}]}\r\nexpires: Thu, 04 Sep 2025 07:11:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-33a\"\r\ncf-ray: 97978e3ddd48723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (826), with no line terminators","md5":"bcd143e49b60fb9eab2b830c11099643","sha1":"47e4a787cc2aa2733bfc25cebd219bc6bac710a2","sha256":"ee1ec579f6bfab8d3455078e7f5747eafa57c349e1b151b27d97d5cdde8fa3a1","sha512":"45e07472e5cc25f3768afd5d0e7cff2a309a2021c66a9509a62668bbfe7b941ae6b67f7f2800ab1beee056072cf72dfa02314b891fb90ea5795c567b7958f124","ssdeep":"","tlshash":"35012b311119253eee53aa62fd70e79a7000cd01d1b7935fee426f2ac44a3d698b49e4","first_seen":"2025-05-30T09:49:46.992182Z","last_seen":"2025-12-20T20:14:53.728282Z","times_seen":15,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/account~assets~contract.82b93066.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/account~assets~contract.82b93066.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bILXbTCqZ1hGAZOVAqHOO3pzwKZFxT3CixSVQM5Ra3lyMBHUe1at63t76iSL9Fi76d0JYfTEnIV%2BM%2FCzvHpyvmqPb5HZA5pcWSNo6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-3447\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e40edf8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13383), with no line terminators","md5":"e76a2756fbd701cb2b6bc8642290d151","sha1":"980a158a923f8a76aa106af1e78986b0c2c867ae","sha256":"581bd7d91deb934862f418df62a9aad17d0acea33f8d999171b1abf0391d4037","sha512":"89626cd4b50a83271a9bc6633df5a37d896b1d51d403a59d981193af878cc59c25e8230fc03f42787508e07b9382c8722d7556d79011e75473364c1dafc1e24e","ssdeep":"192:YQIFPJ4I4ZJZMMXjjQxz1N5IhfViwniTVZdxFrFCwM2sWPoo5i5P:kFBOZJZM8mj2fi0iimoKg","tlshash":"d15234cb35d7f64853739159412b121fb22cae60184e9e24ea13f6c1b8acd97d23fda4","first_seen":"2025-09-03T17:29:31.781038Z","last_seen":"2026-02-15T05:28:38.242258Z","times_seen":14,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/service.57471c0a.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/service.57471c0a.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7kWH3oKr3RE7i8CvzbSjcRBiPZbjTAur0giBy2vPRFUxFU3MKgd0RXqTYxlwULC83UWS7VLevTSfIvFkLgWVJfmMHkQJcAm7qJGIfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-5f1\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e457efd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1521), with no line terminators","md5":"00654f43c855eecfd40af367900f11d0","sha1":"8549d67e75aceb349edee38dd919ab8a2ecabb80","sha256":"58737a24ebdf37b5061238c917166b084b7f255396d68333d206431d0ed82c29","sha512":"5f16255e42cacd9491d85b183ffec4c1761aaecd7108d5d70c18acb392df7163cb0afb62e46b28e9b85fc0bbf1063cd814cb614d182ab55330cd0f293bb3807c","ssdeep":"","tlshash":"6931d342b025ddf5287cd2ef4c368245f6b11a15b075e63092c8fa8db66bc64554ff42","first_seen":"2025-09-03T17:29:31.738619Z","last_seen":"2025-12-20T20:14:53.710657Z","times_seen":13,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/zeta.e92b5fe0.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/zeta.e92b5fe0.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5wj9IKG0ayG%2BDtK2M%2B0xtV%2FmQk9%2FPLWJE7NTRSt%2B1Di8Myjfnav%2BUWxsAmzkVTgzC6JO9ml2K5Hy5cuLuj2xcwxaHesqCymyPaoiw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-371\"\r\ncf-ray: 97978df42ae9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e92b5fe0fe28d7f9f8479d73dc7d2979","sha1":"8bdc122c25b488c1ee9d82c6b130aa3f1aa249b0","sha256":"84b1039be8c38f59d14a8159bceeb4fd9b2af5089560696824ba9b6b52905949","sha512":"230d654134ed16d3dc9e2c2c1e3868d2fcae04ef815781608b7f74c388d9c2c6fb6f1131e6a4b3af4c6dac4e0a3ed55a463b13e43eeada732773bd1ea41c79b1","ssdeep":"","tlshash":"f8118c366acc59a44f098f1abf3f1c214339aef85c3e025c65f32963640d26b2964be0","first_seen":"2025-05-30T09:49:46.984468Z","last_seen":"2025-09-03T19:13:04.769666Z","times_seen":14,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/morpho.22f73bc4.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/morpho.22f73bc4.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=seFBBffKFloixVtv3IyUwNBmDPMA2UHSQOgK9dNrW5X%2Bhukl2j1XoiiovC9sW4iuRvCnkFlYMh48%2BBnHTR6XzQLPTCfXS7FAjlDMCA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-89f\"\r\ncf-ray: 97978df41ad9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2207,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22f73bc4a91c44df7b3d2dbea74f5b45","sha1":"a36c0ae74c6583da6a462f542b63a323ef767806","sha256":"cac34b52495a290ecdf753f36902db7c011797823086dd703aa6060d82eafd8c","sha512":"840fd8dd18bdd114d448b786776cb64a8d70fc097c6bcc8447eb9a7e0c28c87763d0a8191237fb1ec51c2e67d610a668f9d96c0394a43820187458bc55f4399a","ssdeep":"","tlshash":"7a41dcd1239e40f8b8068bf65a6d287819bf18f93b44a276c6605f18d06a09b9dec5c4","first_seen":"2025-05-30T09:49:47.017002Z","last_seen":"2025-09-03T19:13:04.768346Z","times_seen":14,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/kwenta.ecadeebc.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/kwenta.ecadeebc.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RBRigvY3PtdDHjsYYviRCTQhaFgkqOmAx2uv0wmmOhnnFuV%2BTMUYvbKjpP1WgVIwX2%2BAFiM4TOuz269J%2FdxihtqZWdjSsD1DQ%2F7Gw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-be1\"\r\ncf-ray: 97978df42ae4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3041,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecadeebc6cfbc453756b7e95339ece17","sha1":"0716df84eabbd03bbb1313177097264c5972a4e2","sha256":"64a12a0ba20b7c192bff9b9dedd49ca318c3dd2445f8f128347e88d8f83a8efa","sha512":"9a000f92c96698721cf4255fb7fbb1e03eb652924c1b4894d89450eea2a719199705781cfe7002a3cfaa1f6b4f691f32bfbfa960954c46d3b773899833656107","ssdeep":"","tlshash":"16513253b3aed8a1e405e3bcde2a8924707d44f6a89782f18095df2aac394c35d1dad4","first_seen":"2025-05-30T09:49:46.97968Z","last_seen":"2025-09-03T19:13:04.759902Z","times_seen":14,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/v2/currency/list","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /v2/currency/list HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\naccess-language: en-us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Xzwgt%2FB5k8%2FwjJ4KlaRj7LgPTeht7dOyBm9gipt2uOJF3GJBXecJOlGG%2FgpTKs6aRIXhOClMeVu%2BpPdTZszL167VPof8JeFgc%2F7Yg%3D%3D\"}]}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97978df47b04723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8906,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d92a61bdc369d27a386fbdf709d46f57","sha1":"542fcfa47bc7e674338b42d358da2eec2bacd52b","sha256":"bdf318cf4a4e04d813cfdb9eb7bf077a842d6b3a8cc0225588bc8fdad3cf0e65","sha512":"d52259d618f454c1094f7de9bde9f97a104c7d877b5335aabf135583e2b7854c8ef84d4fc32ae56e9c1e5314363602362c43f5d75851ae41e5a3ab1a872e0d70","ssdeep":"192:dgGzdWX21jXHQRU93KqESWSV7iS+jXZIdLXtXRSrK+VQTACdbR3ft+ZQ5ft7RrPB:SGzdWmRN2wiS+j6XtXR7TACd3lt7Rrp3","tlshash":"1c023bf1e2fd4a5a49dc7ac59dc3663941d462c1c221470a23fdd9ba63e2f5f322e284","first_seen":"2025-09-03T19:10:47.580881Z","last_seen":"2025-09-03T19:13:04.77599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/css/termsOfService.1173b195.css","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:54.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /css/termsOfService.1173b195.css HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDvBtRFE8oNrs%2FfrV71BFavjpadZYwynMxGaM0wdk16cMsPU46Hb2Uz3ILS5GZDFal4VwwFqp4Kih9ewmDqQeold7J3oKPE%2BmtOZww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-6ad\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e3f8d8b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1709), with no line terminators","md5":"9dbcdb339013a0bc38dac78488c78a7d","sha1":"d7e3ccfd01b2c2711c06b3a88312ad0c6d880652","sha256":"913f27eb824d6b35e05fe7a1f2619246eae09928e990d8e792da73ba765a170c","sha512":"64fdee59a7ec27c095f819c61ab5cfbb30d02d327bdc9c6b110f42aa5129e0b7165b16b3fb58ca07148f0d113c0720704416e0acde67c1ad36967dd9c9c23521","ssdeep":"","tlshash":"22310500314e111b7627dca5fe92daafb1706a13a55695e7b93ad52bccc74c2f21138c","first_seen":"2025-09-03T17:29:31.763003Z","last_seen":"2025-09-06T16:35:34.014953Z","times_seen":12,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/authentication.63c69279.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/authentication.63c69279.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VwW93hGBv%2B81qmvZvxeH8VNdsUPQezOFAahn%2F3NlEwgwwxLbH4ZV%2FKDZtRbRueAlIzbOvNMs268YasQiJXF%2FxK7NoJ8zvguGfnG9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-5a0be\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e428e78723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54502), with no line terminators","md5":"16c3ace218c93e9f9a8e04206a948554","sha1":"09c5127302b8fcc530b5c9f323afcedf45a563fb","sha256":"10559b0ffa40caed54d0709f06bbc24754eabc1fd1a6131ecedcc55aff25f7b6","sha512":"1442fdd068f2308ff0eff819f3d16f604034afc947ea574eb9551bdcded6383f4f2e09d30479d4cd5cc85f89abd7d7375c4d8067b191b70eb3240792f0ae0d10","ssdeep":"3072:n8NEIElUn+4aKnpO2RgN4SjQ3bubycDqvj+SJj9uz32B1KHEidc:n8N9Elj4DnpOugNdjQ6N+WGB4H8","tlshash":"6e743b2cd281cedcba3ff6f85d2b86b8e157bc1cd47db041af65aa09119904a293dc74","first_seen":"2025-09-03T17:32:48.536007Z","last_seen":"2025-09-06T16:35:34.061405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/termsOfService.d7be6166.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/termsOfService.d7be6166.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCgjm0jeQlpkz%2BueRvSRjXOq4Tk2CY8OxhgiM5fBESneAXZeh5GN9iGc9BFLVKbhHhzgmPiuM7rqFf41P30atwtLN1qzvZRN%2Farihw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-3374\"\r\nexpires: Thu, 04 Sep 2025 07:11:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e45bf08723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13172,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13156), with no line terminators","md5":"07372d9c59dfd9954e92dae5b406102c","sha1":"f2dcd5225d0124e01a891e7e3b594592b1aeb7b6","sha256":"4793179e74ec8c5c54c8389fbf6b9104f2cb1c7507bae274bf421764ef45d8f9","sha512":"9c5407566de3ed9c3f08ce713e8af55cde44ae39fb238027b38f1e30dfb1dee8a222873b1c37413f5c8c5b649e1585964206ad4af293deaf1b37a325f8c74cef","ssdeep":"384:D6qg9TfO5PbumlAtKsTp7NFYYHO9uxcuQMv:7Uq5BABT1G8cKv","tlshash":"b4429601328a2333219782d5719767ceeb3ed21a132646f4715cc4aa27c6dbc527bbde","first_seen":"2025-09-03T17:29:31.772109Z","last_seen":"2025-09-06T16:35:34.045919Z","times_seen":11,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/soneium.3e87f538.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/soneium.3e87f538.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7h7s9qigJaE4QauUWigem8AlntJUQqF5BQ%2Fm00E3tM3MqbDBA6ePicLAxUeiIoPDqGyN%2FE8fKt1oQooK8t0p7zX66OMj63cELFvpjg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-f8f\"\r\ncf-ray: 97978df41ad8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e87f5384472a8c62a12f141275c9c3e","sha1":"e64b5c5b7f13e9c414bc3f7c0308822695a4294c","sha256":"c4e5f7e268b820f61da92c69cd76d387db9204f9b18b5cfb64999d7e49845e46","sha512":"f213803d89178b43c36b4aef7f1acf191f87e3638054e2913ae89f7cae089cdc56a874c231213acd86aaa696a7708825665b8f4502547d01bb2c583ba87a8a3f","ssdeep":"","tlshash":"468184ed2bd14dd49c8ce3c3ff0991b9710b60fa68474a2cc71c9f29398996e9c55e81","first_seen":"2025-05-30T09:49:47.026114Z","last_seen":"2025-09-03T19:13:04.758957Z","times_seen":14,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/bluefin.bec3d0d6.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/bluefin.bec3d0d6.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMhnuVqswrApHwCYXK6yX9lOjAskE9e7xxaga5NQHZLAowuJolR64muHK0mlRLq%2B6t9IFMhTIJNboS%2FRDf1lOJXxWae7qhcMBTfGTA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1921\"\r\ncf-ray: 97978df41adc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bec3d0d6c54ae96cff51479d6d68362c","sha1":"01242ff568fd8298f6d14db14b50e704e3cffa7c","sha256":"487122be8131a7025eed8df7a7ffe6ca28dcaabc5a19eca225409a6448fcddde","sha512":"a3e01c806d9684730bd6a6141a1a3c0f6ed84786e4df86e15f4c4fdb57d407a7ff27fb468bd66ab12db75a32950978876127e4c8185686ed1b608ae87afe446b","ssdeep":"96:ZOtu+dopKL1BuqDaBY5KnVU6WfFMptEyQ90GxmqUr1wv1yvfFjvdhDsacsAq8JGW:ZOVuSaBpVfWdWuyQ9TMBrhvt3ZH8t","tlshash":"aad162e1a668b6e4e403fbe4cd3a4462be4e38fdbbc11366c154acd5d1a50518fc8cd1","first_seen":"2025-05-30T09:49:46.993055Z","last_seen":"2025-09-03T19:13:04.722189Z","times_seen":14,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/tv.50fb297e.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/tv.50fb297e.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXI8AXvt2RzQtg8H4CTkqRa%2FVI1pZ%2BI52NznY7B2PDqdWx%2FpTqKQYF08daoRVRC%2F4yw2bsoMK9pruQsrwYgmE0LvZsz%2FuBETEOKowA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-1267\"\r\ncf-ray: 97978df42ae8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4711,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50fb297e1f7740206330af381916cec3","sha1":"882a50c5a2bcc19b43a439ec0cbd5c2213c1f6f7","sha256":"b2e05826bc9858cc5c1f47459facb13a2c810c0d7037dfa9e283e64b70154ccf","sha512":"02ce985b7312ed8532e5cab6c35368ad181a42720c6f2c0db803cf50e3dcb16dd2c44f5111770e89860cc69a3c44848fdae54db71b41d75b568c84ee09c12a4d","ssdeep":"96:98HB+e9VA+HeHs+WGzV7ZGwi37wKIacV0wmyl4/ai2:98F9G+HeHs+3C7w7Vlfn","tlshash":"1fa185e5a32462e83405efeced3791a6755e3cf67fc0a3a8d924ee34d4960a18e41c94","first_seen":"2025-05-30T09:49:47.009525Z","last_seen":"2025-09-03T19:13:04.743794Z","times_seen":14,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/akuna.9e387886.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/akuna.9e387886.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvH8%2B8mUwtzzArlYsyi5mPVlyGc4KeOUBAlHz3wuZuayRW17RXcnotgiNRG%2F%2BXeN82mOrpFTE7anO2fQbRYKzxSzES9mxJTmzEgQfA%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-23d8\"\r\ncf-ray: 97978df44af9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9176,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e387886336b643557ddf2ec47829fb9","sha1":"5ca90dbf8c3bd483d73656142ae2865118a7a2d1","sha256":"a505c8c5eb8c0ea8b76a01201911abd8e836aded5c725982ab82d97f847ee4a5","sha512":"fc6a11216ded2d0c0979bd335ae20b3608d3ff85d7e1c388e9d9e4939fd58f57e6a3cd448400e9088a191104a91f2a546d5fdce716e2c57007a8db6b86b0544b","ssdeep":"192:H9dSFuYrScS0twBIQUBk6e70IkT5uzPX0sUJMyi8U1ozzVKj:ddSFe/SkX0xwrUbUwK","tlshash":"1112b8a0a7dec3f1f50af7e88b2959793f2b20f66c31c82d87625c64da5245e5c9c8c1","first_seen":"2025-05-30T09:49:46.997489Z","last_seen":"2025-09-03T19:13:04.724278Z","times_seen":14,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/favicon.ico","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:44.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:44 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMV8IxzbkgLCcJpEuxX9np2K8XsYDAO0blKEC3sptvwerT37Ir1pbw3TT%2FCcJ51NylZhFJ7mywX5iUvea6dPAqqt%2FhYQInfZS7SA8A%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-3aee\"\r\ncf-ray: 97978e00ac99723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d236fcffce32d155a1a1713d0cf4ae15","sha1":"71548e573809c9053469d79a4f38bdec64398328","sha256":"797dc944844e419ad2317fbf5db1e422b4a7567fceaf206dee6fe5aaf947eacd","sha512":"9c50926359cbb67e2e47dbca66b081c2e2ea6bfb295d2e498d7d835fc9f3fc0039c7041753fb92c8eb4136d42f95dbad99d06b0bb813f4a196c403f2a6a7df72","ssdeep":"96:jwxleOQtRxPxnutfn4Pnna6I2V/g5dZfpdtLZ8mljKSjyysG5/NFj3:jjLR7an+tSjys","tlshash":"2662fcb4f057ecc6f09c833e979585e8611c4b858b6ec78712033adb5a691f72c591f8","first_seen":"2025-05-30T09:49:46.980509Z","last_seen":"2025-09-06T16:35:34.054744Z","times_seen":15,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/staking.af70c02d.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/staking.af70c02d.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boE%2FXvbYlmfRIjo8ZCUMJygAbz9XDvVBCLhwZxWus7wOqN2zUKJaTbXZAfIGgqQWX9DTs0dH5SIQMmb6hEZzqQz3CGHJnyrjb0Xxhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-6bed\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e459f03723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27629), with no line terminators","md5":"fc4cb4c5732f78235e9d288223e2cba8","sha1":"3fb3b5c55c27434bbab64d6583d266d0734a08e3","sha256":"a8f75d62b1b7a8fabbc01661076dfcbf15008b11382e304a171fd2dd4dfb83b4","sha512":"93e5abbe6b250c7d901d6fc0d2032a876dbf95d23fed4866d36309e0196ee520783ffe5d68cb849b0baf1a673e3419448c8793648cc00f4491a851c48bfd30d7","ssdeep":"384:ALuosOWEC9JNTWAOpaz1X+zfsDRjZnN5RktB1GAQoRBQTqest2eJIbqqtUHda266:A7/C9HWAsaCtB1GAQoRNYVbqquHC8B","tlshash":"11c23645b0e6ed9e647d92e7082b200df2f15f84f057e060ee54f8cc7a2dd54a21ba9e","first_seen":"2025-09-03T17:29:31.722695Z","last_seen":"2025-12-20T20:14:53.766895Z","times_seen":13,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"pythlive.com/wss/common?token=null","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /wss/common?token=null HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://pythlive.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: K31W9LTG0HAwXeBmd5/FBA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 03 Sep 2025 19:11:43 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: OwPVo61xWziFuwNCoNK2MAza6Es=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XHqnI4eV8tiN4qoV0%2BH%2FjG022%2FLycPxpHVqF%2BZshDj9nWdadRehKlaap1OlhczmmAws%2FRz5Tt0SfLJZ4VGwhuQ%2B1S0x%2BrPNK3tFC6HaZCOVoBwUsvwJawvkEFa9wKKo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 97978df42a720883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=512\u0026min_rtt=447\u0026rtt_var=198\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3117\u0026recv_bytes=1173\u0026delivery_rate=6360175\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=5aac03f1be935dbc\u0026ts=496\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":481,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/okx.5b56ac39.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/okx.5b56ac39.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IczB7yYbmj9X9NieV0%2FzsyjV1UgKbFnpT8A%2BHatZoCEuz%2FElY4eS2rS4Ve6%2BRz0tjitRQyn6JTJuJEAB6iy3xBJByCYbyjDBPKQaqg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-e00\"\r\ncf-ray: 97978df44af4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3584,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b56ac397c2bf87af8ee0d7d9dc8f724","sha1":"2066d6263934efb5e71ecf84bf00c656e1edac3e","sha256":"9f5629415512c638faa35e979e3863159313294b09db9cc97bcd9ab29a7185e4","sha512":"91e1eeabf8b687b504bfc6b4c21ce63b6dd21af13329cff6b6bf3c8f34529b58faab91675c72d9dcb9dd64880bb54e952f5d2c662ce8dc023f41a09de52c5431","ssdeep":"","tlshash":"227152da13024385af8ce7afc279657b780234f93e0ac099cb525d62b144f9e4c9cdc2","first_seen":"2025-05-30T09:49:47.037029Z","last_seen":"2025-09-03T19:13:04.771906Z","times_seen":14,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/twosigma.3b0ea819.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/twosigma.3b0ea819.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxJTQjxig1J2yYKD3afcdsQd65vpIiG%2BRWWXiuGEsDlliS%2BgbltJ0dzF6qEcfF6RYmFTqCLYa7R2iCCPQCBLPkO5lCGHgv5nW1DJRw%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-e0f\"\r\ncf-ray: 97978df44af6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3599,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b0ea8193795af0fd6f1b6681bb443fc","sha1":"d82deea4429e4bba331db07b7ccee1e9b489eace","sha256":"c835e76b73c7da9600cc17bfe65f697f2c359380a6f3869dee73c95210950ba1","sha512":"a8fcb1961f9ac1ea4c0927dfab752775c69abb4534ab78f6db1050c131bd7b4c35d505da42a3b5cf2ec85b6dbdeafdc93f937e1155abe22d7a50ad4834d36720","ssdeep":"","tlshash":"38719ae16aacb3f495012b35d9298566b2bb28fefbe6828492d05f417c150f9cc4cdc0","first_seen":"2025-05-30T09:49:47.030623Z","last_seen":"2025-09-03T19:13:04.746227Z","times_seen":14,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"serverweb01.oss-cn-hongkong.aliyuncs.com//data/2022/03/17/5a26cd74732122fa.png","fqdn":"serverweb01.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.240","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:43.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 07:02:09 GMT","end":"Sat, 21 Mar 2026 02:06:13 GMT"},"fingerprint":{"sha1":"B2:57:E9:B4:DF:20:94:4D:E2:85:59:20:BE:D8:5D:70:63:65:02:7A","sha256":"05:17:EA:27:D0:4C:D8:5D:6B:2C:A8:32:D5:A2:DD:E4:47:EC:4D:DC:E7:7B:33:67:F5:F7:4F:C1:73:01:01:19"}}},"request":{"raw":"GET //data/2022/03/17/5a26cd74732122fa.png HTTP/1.1\r\nHost: serverweb01.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 03 Sep 2025 19:11:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 3115\r\nConnection: keep-alive\r\nx-oss-request-id: 68B892F05361BE383526E1C9\r\nAccept-Ranges: bytes\r\nETag: \"8ECE4AF95FB3EC55D948D04E7C7E98CB\"\r\nLast-Modified: Wed, 06 Apr 2022 10:17:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17521998051226204026\r\nx-oss-storage-class: Standard\r\nContent-MD5: js5K+V+z7FXZSNBOfH6Yyw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8ece4af95fb3ec55d948d04e7c7e98cb","sha1":"619bb4f2d7b2e56a2c5d58ea536fd7324071b24a","sha256":"6cd18b282be8dba188a50b721c977436cac616b5ba51f7c1e3c14f4b0ced4d06","sha512":"367a6b9dc48dc5ed9a9a476e094e74064ab79d7ffe5877016f101896d26043066a9e329dd2b324a0805ff8b5052ff5387516d84b6628393cbcc824f42af10022","ssdeep":"","tlshash":"1b513cbda34d7dc9d368661902079122667d3f083580a0aea025766912f9f4cb4a1db7","first_seen":"2024-01-09T01:20:55Z","last_seen":"2025-09-03T19:13:04.762913Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2072,"timings":{"blocked":902,"dns":0,"connect":290,"send":0,"wait":292,"receive":1,"ssl":584},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/js/c2cDeposit.ae0c2f8f.js","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:55.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /js/c2cDeposit.ae0c2f8f.js HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IjIVbbL0B%2BDYVW8axHnhacDBYR053Ec%2BnjRfY7Dm%2BmBjCawxk2%2FfBSj8uy0PLyZuNsoqdDMCHnNf8LldEeFVB%2F%2FFsIyIApyLOYi%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67c17649-19e5b\"\r\nexpires: Thu, 04 Sep 2025 07:11:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 97978e429e79723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106075,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63469), with NEL line terminators","md5":"0c276e139698f3f9e7a7fc67932460ce","sha1":"70c8a989492a310030a66099b69f6906c6c3fc05","sha256":"801d754078c2e6b8cf87355cd2b423a2caf94e39d7f532b44ad5bce3d86fadb9","sha512":"224675b127cb3bd599231e8133515445c0289afad2d759cee813cbb32c53bb82c87c97ff3c99ad5e81e30c67fefd1746bb7cbc16f71e06411b782dda4e9a6559","ssdeep":"768:sNZAtD50uP8Mx40WpQ9NUvDvEDOlZ+XlhKQR45Hd0efTclqIV/5fp1z/7ng6MWHn:swEuP8Mx4r8BO9PTOt5Tnjf3PK0v9Xt","tlshash":"60b3b80bb038eb97161ef2b9307f0705e4f8d5c9989dac2b07dcefd8652d924a267425","first_seen":"2025-09-03T17:29:31.688672Z","last_seen":"2025-09-06T16:35:34.012539Z","times_seen":10,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pythlive.com/img/cboe.a20afa09.svg","fqdn":"pythlive.com","domain":"pythlive.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pythlive.com/","date":"2025-09-03T19:11:42.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pythlive.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 06:33:15 GMT","end":"Fri, 21 Nov 2025 07:30:47 GMT"},"fingerprint":{"sha1":"8F:BD:06:7E:C7:94:BF:72:8E:61:32:01:51:38:45:77:6D:63:64:4F","sha256":"FD:19:FD:57:50:EA:85:DE:42:D5:A7:C3:31:B9:45:AB:45:0E:BD:67:32:BD:8F:76:FB:D2:0E:EE:46:CC:F7:4B"}}},"request":{"raw":"GET /img/cboe.a20afa09.svg HTTP/1.1\r\nHost: pythlive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pythlive.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 19:11:43 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Fri, 28 Feb 2025 08:39:37 GMT\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QnjWeO4cyCdkvhw%2BRqwFY4LcoEUqTTTeKDfWtqH3DiBioEJuHogZD1OiXDdrizVkv1GmUBFs27hVp2QXpTmW5wZVr8guBX3AOxc%2Bg%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"67c17649-9c9\"\r\ncf-ray: 97978df41ad3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2505,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a20afa094b804cd3348535c66ea09039","sha1":"35b36723cc8cef4670de9679a90cd88755c4f1aa","sha256":"fab8d742d966f7235b4a07591da1750cc52b9ceb752139395cfba44a39160a25","sha512":"69556da054d790983e532f5ff55608355e294418dcc65c793fb62472eedb14dd53ed59f8bd118662a784d45144dff851684fe3f070cc47ae265b06406ce96835","ssdeep":"","tlshash":"e95176a1e3e4f3e47c01f7f5e513482cf22a28926f6bc35071526f94d12a01c4a2bee4","first_seen":"2025-05-30T09:49:47.025125Z","last_seen":"2025-09-03T19:13:04.750097Z","times_seen":14,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"pythlive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}