{"report_id":"4b0aeddd-eb27-411f-8e0c-7c2dfd5e8f9a","version":0,"status":"done","tags":[],"date":"2026-06-24T14:05:04Z","url":{"schema":"https","addr":"recovery-dispute.cyou/","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"104.21.26.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"recovery-dispute.cyou/","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"title":"RexBack","dom":{"size":129732,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51492)","md5":"c4affc841a69fd2d339121a65e39353c","sha1":"c1f345c3b6bddaa1b551e22052b59f431e7b58c0","sha256":"cf1f3e5a020d038ad7ea23de922cfac836b9c827bc9bb4e9021e15a55e549d00","sha512":"c83fada7584337d1052debb2fdfb5b9739800a8fe0a51afb8aacae80c05caeb82af699b207387a91a251b58106eb058a8484ad8559b308a21ed62e615a045e7d","ssdeep":"1536:quct6SuL2/jGfgPZRTksPSRIEIEBa4QuoBjYfgXTqsLhen1UWxuVmIvlHKNE80sK:quctVuL2/jGfg7bVhnqY1Crukra","tlshash":"67c3cc23465931231137c2d520a99b77e2999d1ffaa70a013edcd7f62feaca0b127149","dom_hash":"domhashdefc5394bdc6993ff3aed68c0423c1a4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"recovery-dispute.cyou/","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"104.21.26.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T14:05:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"recovery-dispute.cyou","ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-24","domain_rank":0,"first_seen":"2026-06-24T14:04:11.951879Z","last_seen":"2026-06-24T14:04:11.95188Z","alert_count":30,"request_count":30,"received_data":3255747,"sent_data":14563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-06-18T12:39:09.784738Z","alert_count":0,"request_count":4,"received_data":154176,"sent_data":2097,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-06-19T07:32:15.653364Z","alert_count":0,"request_count":1,"received_data":997,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/jquery.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89664,"data":"","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-06-25T20:24:35.904041Z","times_seen":32383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/slick.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","size":43881,"data":"","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-06-25T16:58:12.890639Z","times_seen":21963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/intlTelInput.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"401b851874ecb55a647b27dd3a330f49","sha1":"505e6d88158b926bd85c3f9e9180124b87b2342e","sha256":"4bfb8afc7addf4495ba4c95bc5b822553ef97ca8c72f07dede2c39bc278ae78c","sha512":"146da385e01def9278734d99fc1963d2f5c3acc15ee81e41999f23466a75e251df4f684689ed419e5ce7bab039e549263db3829448d572f304b5dc8021183c9d","ssdeep":"768:XsqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCYuR:BfUQWodCjgtmKgNzazCv","tlshash":"76d20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","size":29481,"data":"","first_seen":"2023-04-07T15:42:11Z","last_seen":"2026-06-24T14:05:07.262261Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/intlTelInput-jquery.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73a30f84b8c4078fb6a5c4092c3c63ef","sha1":"5985e47497b08efc89563da5b3ca0e951e4d7262","sha256":"ae78b655f3daf2070e84a8eb954e439ebd886309c7dfed3fa7bf0647f81fb188","sha512":"8513f02ad980c18541b928263d746effa1e5f9ed95f56b9241364858b9a6debf20f47f18e0855e7e37304be7b75c0b32a001602b4906b2596b7074de8a7ba36f","ssdeep":"768:lrqD7GzOoS+D45YdR3QWVrdNu8Oxwt0q3vTpzaDPCgei:0fUQWVLujwt0qNzajCZi","tlshash":"cfd2099973511237a89aa0a1687f16472ebf30155a84cc9cb87ecdcc0fecec9a1b5734","size":29923,"data":"","first_seen":"2023-04-08T02:40:26Z","last_seen":"2026-06-24T14:05:07.273164Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/utils.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85f88ba750d38b98d54f8b4afadc4df9","sha1":"bd4c971b82de3d095f54837b68c08c5dcd1abecf","sha256":"b646dbfe618a51842d1a348601fff46100b4b36d924e0d740553764b0d7111ce","sha512":"eac2a972eb22410fef381594d28b8d7ac764943ce0c32c277fedb9e5308c02cfa7ebc8e70ea6830b782dd35a1f616af2e2645d08747ef2ea31f3c1d3dd804e75","ssdeep":"3072:g5M0n8lAJjGs3OwPss3MwPT6Or/t2xrmnmOdGY9wIpUsvhkXk4Lmt67QdEN/w0qi:g5MzGB2bxrmnmO6HH","tlshash":"b934dfebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":251728,"data":"","first_seen":"2023-03-08T20:10:50Z","last_seen":"2026-06-24T14:05:07.256415Z","times_seen":568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/ph.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abc3267b77fbbef09683a01b4032f22","sha1":"390856b2896ab13818c06e9b738a2e7f6f1e1b79","sha256":"f018dcb18280fcce87b8b61d686d99a0e44ddb047aeaf13b82af3b82c48911e7","sha512":"cb676542465e536e58c29ecd7f8c6ce67492501729332b5929c0a4e70401d61bc6fd1adf3c134af8c5e156444b1d858706b6bc862865743994260ea6298b7d93","ssdeep":"192:hOL5nyzm6x3xtHji6rUzVFili/UZMQbdd5dh0x:0L5S3Hji6raTilisZ1dnhW","tlshash":"8ce17418117b18b54233d1fa7fdb660171e0012f2c48db29386c1a8e2fd5d656af2afe","size":6873,"data":"","first_seen":"2026-06-24T14:04:17.242046Z","last_seen":"2026-06-24T14:05:07.24843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/app.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb4e47c5a4fff91213f1d962b8f05b22","sha1":"ce56770417989f8f4e56703d7a4863fbc667b54d","sha256":"d688b08cfdc7b14f00f714a0187ff1f5701256ad106126c8f3f23a31d344d98d","sha512":"cda79b23377fccf6153754d5932817099270bc7da969c6d474f3c963bd8c0c75c5df14bbfa54bd252a3f62a41433dcef817537514af3922c0ea0206ccd12b50f","ssdeep":"","tlshash":"47f0bb0679b0787560bbb46f910b58403d285886920bd150f8fe9d791f91374e57382b","size":545,"data":"","first_seen":"2026-06-24T14:04:17.243928Z","last_seen":"2026-06-24T14:05:07.265069Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf5f254784cfe7b68c267a2b53c53ba7","sha1":"3d2b82290ec988e0c9f38be3fe5c891eb3227bcf","sha256":"6132347b58fcc819e17b19182b1dd8a9e021f3bb51620a5b32662a294ec5a7e4","sha512":"81412191ecf2e2f7a5a8cb7c190f05f902ac36eea6c2b7a6b5f70dc22765bc7d70d2af143bb588e5aaba747e6bd65c49c23b5deca45293033b437b3b18780d38","ssdeep":"","tlshash":"4b01d677167f4a3002ebd29f67e75f693570000b3948cb483e6c86d31f6ad8560b92d5","size":790,"data":"","first_seen":"2026-06-24T14:04:17.286152Z","last_seen":"2026-06-24T14:05:07.278656Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/aos.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-25T21:13:28.813713Z","times_seen":20671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/styles.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.624Z","timestamp":1782309876624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-2fd9\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyjxrKct5A9dNbE8UBUzCKCqJ66Xn9vJPrpPTV27pr6bTzsBVLQmUUraiCRS%2BoignNrJFSess2kVXkH%2B%2B4WyvUyAEtRiZhChgg5ddOOJmTrUviFxPuYvJPY%2BzSYc3lC7KYpiojcR5m8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858eee256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12249,"size_decoded":3762,"mime_type":"text/css","magic":"ASCII text","md5":"846f52e0cee195c68cbaf5521eec1e99","sha1":"ab066e647bb95af2e3cb50524d82f760c29325a2","sha256":"27fb533b26b194e182f529b6e0f79694d02cf9c4bdaa7fc5d32bd4ac3140d59c","sha512":"e64fdb27fbfcc3a3c2935e3889de42a4d6f7f6808ee5ff9e1dfe6699ed1e73619c7f46398430a80f0d4fec4408f30621c117a0ca1e019a98a89b02a5f25a610a","ssdeep":"96:3ZhgVPNwFCoMjXLZIp6pI+4dTChIwLQteplqsEgtwDYZaX7HRvXL6LIm6ak6k67u:phgdNnwtxnYZmHRvXO6ak6kt2O9d","tlshash":"9142dcab45a506057807d8442b920b76b3ac9413d54fe9f93def205c9fcaad9c1e338e","first_seen":"2026-06-24T14:04:17.2724Z","last_seen":"2026-06-24T14:05:07.233319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/intro.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.654Z","timestamp":1782309876654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/intro.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a0ea80e-888a2\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhQFilRDX%2BStlPzBT4bj4NrJInjXNb0vJU4V3wjPxT%2FJmM7McgVMeZXZQhuVfkCzKxrx3kZGS%2Fo1J4PldbSLNK1uFjnSRSLMPKy568ewN42m%2FibhsexkGXGE5hmHBzBuzCW8LEwiE1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48591ef156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":559266,"size_decoded":559861,"mime_type":"image/png","magic":"PNG image data, 1464 x 1312, 8-bit colormap, non-interlaced","md5":"5accf62408ff0932f939bca1f33780f1","sha1":"f54ab02b7e98bdad5f63cf7b741114ae644f3f02","sha256":"d107bf652aba580eba36f01e78294d9e58f18a85c40ac1c754f4ad0983216372","sha512":"25f8f826f1efa011e9c37467479888c696f12cb810b49735ba367dad5da4f7498e8173aa912778c43abf8fbbd2fc45c685f1ea66e47c4d9c769ca63728d6f3bf","ssdeep":"12288:uZlJCL2GXUPNwt3xLI+LGyZbM8Tkx9E6clvV:uLJCKGXkNMBtZbMxroV","tlshash":"a0c423b9c54d2548f6876c387702786f81af2651eff926cd73a8f1e31830296899b346","first_seen":"2026-06-24T14:04:17.255121Z","last_seen":"2026-06-24T14:05:07.235864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/arrow.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.655Z","timestamp":1782309876655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/arrow.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-276\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vBOrkhFVFF8HfBvex%2FMHDxRFNM4ktPFzwqui8vnobMIpJBEyyG%2BSmR4rV4QQTF5OmCL8cZvnDA71BoMuexSsgajKCTalNcb8nzjdg6anvFEbApkXkBPkGgLTnIhnrnHvt6SWttiA7g%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48591ef256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":967,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a5a01ea47296225e4aacbda66ab12cc","sha1":"1e4c84735bd535caa1dea2aafc4737c515472f38","sha256":"20ae98e001fdfe4ea978e05b9f0b9ec473de460aaa2598896f86dae7515478ba","sha512":"192de80cff9d8cf39a1062e3fcccbf3284fe1d6f82efd977246e31123ee5e493872d2907db629b181c172a7757d02fa7c9be12ac3835ae18bdf000cde36598e5","ssdeep":"","tlshash":"63f0bd709c234c4a8a30b5cbc03f0b68771203b0bb68c06ce0aba78060e7b7d6e53144","first_seen":"2026-06-24T14:04:17.218142Z","last_seen":"2026-06-24T14:05:07.238261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/romb.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.657Z","timestamp":1782309876657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/romb.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-317\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qiyu1B%2FuQv4iFhsCllgEiwml%2FPGa%2B8CNL8zUxR4IvtJJ7CwYFr8WS4BqK5izLYe8xzedvkX45ar6%2Bfc1ycMo2tYYfe9Qrd1r0F8AD4is75OUGme2bubYCl7fhTqJx%2Bmf8kswnnviMXI%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48592ef456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791,"size_decoded":1140,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e9f304d24ce67384b97f6013ee019cb","sha1":"7de28181cb452c9d0d62b32b47853831cfede28a","sha256":"39bc10dfb1a01fd9b896d0bc101ec9960f5b6bad7f539119335569fec641341c","sha512":"8ac8e57a065de25ebd80b5b1f6800416c0f85054f7ba04d8b8079abc0704064e53fb78378c08c1839196c596a59ee803f1de498fce42cb5a9dc72dae848a2b57","ssdeep":"","tlshash":"a501f175d1f6708daa654230f3755c93072e7071f042088cbcdf3131a026d87e95b12c","first_seen":"2026-06-24T14:04:17.265602Z","last_seen":"2026-06-24T14:05:07.240222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/logo-3.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.659Z","timestamp":1782309876659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/logo-3.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-102a\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOJfJZrR7ohqvCHv5XMvFVNeTpKX13y6P%2F4Ojm6IjbuQ63gL6thP9r%2BZPyxeifJPlgRF3KW9ZCJbE%2Faie4%2BZRFSRxz%2BGeusQyJO%2BIbZ%2F5s0A%2B4LzjofoVvdNBGuLxYwT4ZxPY1BP87I%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48592ef656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4138,"size_decoded":2566,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00a183f275fca622d58a4fd0ece64b51","sha1":"a055622363567f395a5475448ac54f9df89948a2","sha256":"493f9f49a5f32475a7a862ba942453a576daed1cca2bbb1477b85c8962f4df29","sha512":"bf728b3c4de1d3aaf8d96b6998d1ee7a3eb420ad96efac43bf0f0a5ea1a553aac8ce55cc11cb1688825ee9740eea896511f9a4263cdad5fbce345863bccbc05a","ssdeep":"96:oJiQynQHgciZekgPNEF4CeBcQl5UdQbAp/5m84JOWlsfe:nLwyZekgQBeb5HbYcJORfe","tlshash":"358165eb4b7492f444d79b5aef33250a395e84bf7fb651c8806e9a053ae2a401948854","first_seen":"2026-06-24T14:04:17.246138Z","last_seen":"2026-06-24T14:05:07.242044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/exo-2","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.970Z","timestamp":1782309876970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /css/exo-2 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 749655\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNnaP5ZD94rjvF2P2vWLlVBeYr0Kj4wOdo32RyxPOXuIcXxQ6efldCLjtU81AvuXG6vkjBfzbvRq%2BYhlRpRduen02Ouz1S9vKaiPfXtHZolW5m%2FE7s2Sj1JNbptMH44rPerN%2FVo%3D\"}]}\r\nlast-modified: Mon, 15 Jun 2026 21:50:21 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a10c485b39744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3423,"size_decoded":1006,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"ab50fa8637630bf3753516afeef07574","sha1":"a5582e595157d768c24a27f61049bd27359a4642","sha256":"513fcaf63f38dc576eefee7b001039dcc81d9d94aa4d6c8b0b2f0ac9e16f9191","sha512":"671a9282787df81dde2182e74429f8ee399fb59e7c9119db45dee7a9113e57a1a48dab52a4307a835c825c0f56066748fb0fb4bc75c6e1cbd5e0b5b095f8e761","ssdeep":"","tlshash":"eb61b67504afe748b5200c8e77df79284f4f219bb54dc9a53bb96d48afe252d028076c","first_seen":"2026-06-24T14:04:17.283911Z","last_seen":"2026-06-24T14:05:07.243952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/fav.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.158Z","timestamp":1782309877158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/fav.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a0ea80e-15de\"\r\ncontent-encoding: gzip\r\nage: 52\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vDCmVT5ktXQQ5rossgnASX1KSyv7%2F%2FW8bZc2zVH5dpFMjKfqoXqgu1xCgYfXk8U4lLGX312kfSrlijn90SaedkYswJ59LXLzzKvb9FvV10JA6RR6amEL1tzjCIDVHuWmxFLm0yPr1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c485c4f1356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5598,"size_decoded":6336,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"000f5fc4dc04c73e35d69de06f7ed2af","sha1":"3d2b9a148e403b1fe54823c5b15abd28c371808c","sha256":"fa0f947ebe8cf8d127b97b8f3ea85ccaf34404960a309e043455497c2b7ab8af","sha512":"30d83e7181fafd99558ae6e30f3d68447174041a170abcd92f63512b91eb50b2a10e5c3d4374e1c0cb2c1fa3c020acdbf4eff26e62f0b0282d063c84ea2a241e","ssdeep":"96:JLS4atjdrsz4aDosr24e3bdAwI2dOlHsicLJHWk77QJkqkswPQiuEMvWjpPGg/:lPatZrcosr24e3ZriMicokCkxPzuLvqD","tlshash":"6bc18e2cbdd33e9fce5886b0d5e8886880568b1c472be38f4992534e974b874c9f8d75","first_seen":"2026-06-24T14:04:17.233006Z","last_seen":"2026-06-24T14:05:07.245388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/15722/Exo2-Regular.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.075Z","timestamp":1782309877075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/15722/Exo2-Regular.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovery-dispute.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/exo-2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: font/woff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlsWZQVlakm3oNyujrAJZ%2BeKkI%2BFX0SCsYCsuoQBFS2pxM9lk0XynIm%2B4gMZE6wcXvMIEqRDdzCtVvOzxHu2rLK68bdLmPQYzbk2y1C%2BX4QvhQD9B1wwfLOMoLbe5JZZop3zztk%3D\"}]}\r\nlast-modified: Sat, 05 Feb 2022 02:00:38 GMT\r\netag: \"be28-5d73bbbdb6c49\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 52\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 48680\r\ncf-ray: a10c485bcbcf56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48680,"size_decoded":49426,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48680, version 0.0","md5":"f536f28ae588ed48347c210f27842a46","sha1":"cea2ffbd40ee95f30875fce62d1972466afd2a1e","sha256":"83d7fa7d4ef95cb146aa7a90dd75a796c512f51ec69b0d0f585ad5d41d60fadb","sha512":"9d5f2e00a03b24504b0d9e257c5428920e8b676ad00a27fc676990e57bcb36acc5554acddea50ec560a57a715cfb36b60ad7b727d2de6d78e4cd7c983590c8bb","ssdeep":"768:YB/6OECQmIKEwo52lt/DiyTFM181V7KrLKOcne390ew4zE6WlN6pHIzZdT:YByyQmIKER57Ek81VYPcuzJfpozZdT","tlshash":"9823f1a63a71574bfba365fec6826648fe49a93dc27ba6d11c834c8b472c0844b701d3","first_seen":"2025-07-10T19:27:30.017273Z","last_seen":"2026-06-24T14:05:07.246777Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":10,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/slick.min.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.615Z","timestamp":1782309876615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/slick.min.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-559\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MzqCLHbh%2FReYhMPmYhj9z62nQ2spcWMo%2FdDSI3UbA8CyPLbABrdMVCebBFKrM0ylyh%2BfFXvyQQxmkVPQ9zoliDSyz6k6wFiA5CoQ1a%2B6O3MEfakZWbuAA7ydSa1qZOrqVLA95GZ4oE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858dedf56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":1268,"mime_type":"text/css","magic":"ASCII text, with very long lines (1327)","md5":"6a62ad0f300504c583e7797c79c2d8ab","sha1":"e6e4f113fc2d008516d21228dac93bb6a2fcbb53","sha256":"50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72","sha512":"c879273f5fc0c11fb2c76e9c075cb4723bd050cbc46b63c5cedd5cf4b952e29450e4d39364559b8418a0f97f46f5e616ffc9b4ff8397371f29c49eb3e7bc7477","ssdeep":"","tlshash":"c2219d551496115a4027d3125ed3da9a38ebf1525c3607cef7408305ce8fbae2dd29e7","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-06-25T19:58:56.877083Z","times_seen":18982,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/ph.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.639Z","timestamp":1782309876639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/ph.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 11:01:45 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ee619-1ad9\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XtFInz5m2uDmj0CwQ1Y2oUZ77KFyTOBKgfa23E%2Fv5MlpYGFLV86SOYk56Jx%2Bh0VB4Zghc1lp2RtS5xRp3sxCkfEaDs7jMoTmvOGdykxwPlfb0wiLJppqaBHx%2Fu%2FtUPRSXkFAQ9IFF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48590eeb56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6873,"size_decoded":3297,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"8abc3267b77fbbef09683a01b4032f22","sha1":"390856b2896ab13818c06e9b738a2e7f6f1e1b79","sha256":"f018dcb18280fcce87b8b61d686d99a0e44ddb047aeaf13b82af3b82c48911e7","sha512":"cb676542465e536e58c29ecd7f8c6ce67492501729332b5929c0a4e70401d61bc6fd1adf3c134af8c5e156444b1d858706b6bc862865743994260ea6298b7d93","ssdeep":"192:hOL5nyzm6x3xtHji6rUzVFili/UZMQbdd5dh0x:0L5S3Hji6raTilisZ1dnhW","tlshash":"8ce17418117b18b54233d1fa7fdb660171e0012f2c48db29386c1a8e2fd5d656af2afe","first_seen":"2026-06-24T14:04:17.242046Z","last_seen":"2026-06-24T14:05:07.24843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/aos.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.643Z","timestamp":1782309876643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/aos.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-379f\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oVL9vPEHnTRWyZN2i%2FhRw2BDKDh6Gijp%2FQ6cQqkQ8FAVGWEGq64zG%2F3elnvyOJAXRC2AtIqRiCimJPbOuRHPyuPeW3GaqDMmRAD5bY%2B6NeXRDactzSeRXvlVD2hLRsmVf453YOwEUQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48590eec56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":5609,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-25T21:13:28.813713Z","times_seen":20671,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/about.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.656Z","timestamp":1782309876656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/about.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a0ea80e-106fb\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHDDNG3r29%2BhLAxvgu34IvjEWmJSoa22avptLx6x%2BM5qZ%2Bn7tMg8Nre55emzjYo%2F7BWCgw%2BkyTNwfktO10meZSkow4b%2FsxfHQawrt11lZbf5yLj5AS9%2BCUARxwN8vuR0ExfLZIFrTBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48591ef356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67323,"size_decoded":68010,"mime_type":"image/png","magic":"PNG image data, 326 x 383, 8-bit colormap, non-interlaced","md5":"af8af5e990a390642133ada50a859890","sha1":"4beeb5ed8325e55c185e302397788b20003d2514","sha256":"730f94ff24b5c1ea06c3253af192803c73efc68e76169f40868a692e4b2eb5ea","sha512":"c8889402a127291251e88df3074a1fae949cd106fc7be9e043bbdd62c08a4e28a4e3ed214f35da8ca2d8b203638e12ae6fec275a188ccf51ea680bd427cc1e13","ssdeep":"1536:DEzQDgm7QBCy5Jasg6ibS7sq5I1HQwUi8iVhKgDvocmlu:DoQMmEUgaVLZqG1HH8iKgYu","tlshash":"156301645ea8ea1b73e6218b0f41111977b47404f87ea43e5e63e4e47bed2878433b2c","first_seen":"2026-06-24T14:04:17.280941Z","last_seen":"2026-06-24T14:05:07.250471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/arrow-2.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.658Z","timestamp":1782309876658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/arrow-2.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-275\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5FV5ogyBbod%2F9zJJhTaTH6H5U5YpPHhajgS1SCsIMfBxPO4moGcfucvFpKuwoHjya9TDbpkrBVEVKEDv4HIdhQHpOXbO7UohXPbP6fQl13zIbEbghbcYZFqmtox9CYPXsY%2BoPqL%2FeRU%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48592ef556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":959,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a21543693433f17678e23752f3622883","sha1":"06a9ed0ce0350678d5b0ddca8f567c95575f789c","sha256":"efa3b709ff4c4c974b22ca8f86c52c887a70837edd3c18a74b1a3d6c1051cb37","sha512":"9ac7c12b76441efdb554c36daf6f0f5768246adc54f11d538357999c6f012fd08cdfcd73650d36449405812246d0fea0f5059d8f3f04fefcabe13341349853a8","ssdeep":"","tlshash":"4cf05b709c174d4a8530b1dbc83f0b69b36602b1bb68c06cb063fb4568e3bbd9e86115","first_seen":"2026-06-24T14:04:17.227724Z","last_seen":"2026-06-24T14:05:07.251722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/why-bg.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.022Z","timestamp":1782309877022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/why-bg.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a0ea80e-6955d\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbASboVBdr%2FZzNeKcsL%2Bxt1ObjvI7L%2Bb5K%2FP%2BxXA8TXKUpvvONAM7q5lEXObDyDti7EOQHcQhlYDkPNE%2FfqtgzLEodm6cAHIwdgOSJrb1ApB4U%2F54kxgWDU9x9W6ntaHJB5QzgzpTJQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c485b6f0c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431453,"size_decoded":432099,"mime_type":"image/png","magic":"PNG image data, 1440 x 1472, 8-bit colormap, non-interlaced","md5":"74f956bb76d9a552fc1b10eff9e75d6b","sha1":"b0078dae1ad823e234621be7c5afadfd76d83d63","sha256":"1541ecce8372e2fdb5dd4cc337a4bc9eb384d725c73d2bbbfe5598d0c19627fa","sha512":"cae8a85293173832477a234331e56da36e42108ca4bfe41890a6faa0839f3d83309dd9ecbbed7db33a4507b8655db7ddc0186ef34920404b934fdfee32625d42","ssdeep":"12288:OuXTt3txnwqWyNC1f5orGAE3bNFPy4I1MCjZtX:F3xwqWyNC16bE3bNY43u7","tlshash":"45942328f08a2ae34565249d17afbd0d32abb7c6bcf66444fd70c672cf09b1a815f058","first_seen":"2026-06-24T14:04:17.220435Z","last_seen":"2026-06-24T14:05:07.252937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/15722/Exo2-Bold.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.077Z","timestamp":1782309877077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/15722/Exo2-Bold.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovery-dispute.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/exo-2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: font/woff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l81MnNhlIbzzL8LxVn5LV3LOTpZsjgQhlllV6azyb4g1Xo3NyvkGLrd3bdxkvypwxPY8QP2u5A8xPhUqGe0%2FaWnA16XWS7A4o%2Fh0BQi2pg%2F%2BHOrXs3A0mCl9bRo5xyoBkpQ0RHY%3D\"}]}\r\nlast-modified: Sat, 05 Feb 2022 02:00:38 GMT\r\netag: \"c3e8-5d73bbbdb6479\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 52\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 50152\r\ncf-ray: a10c485bcbd056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50152,"size_decoded":50898,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 50152, version 0.0","md5":"70bc78f9e1a83e56b3396042dab2d2b6","sha1":"38b0befe01db19f4205611c605d382837a827b9c","sha256":"9720e5dc1797cfdcabfcbb65cfedae6acf82b9a5c415858f5b5983d83b46e06b","sha512":"a39de9f9c7d413691b5d365c9a81eb3d229526f3a424fcf6d3d4f49ed34f599701f6f4dad321831794cc523e9ef84c185e5884fff343694392a02991bc0d09d6","ssdeep":"1536:WS7CZTDoFL2VMti4B5IetIJ041OmQqKIlqxCMZdk:WS25oqVMti9etIW1mQqKokH+","tlshash":"a933f13729434efed079c9f00ab27fae7b3a979209332754471344182da75c87ea6354","first_seen":"2026-04-24T05:03:56.146043Z","last_seen":"2026-06-24T14:05:07.254208Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/slick.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.631Z","timestamp":1782309876631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/slick.min.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-ab69\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76PN988Y31q2xq0BGcoikrv3CjJAKS6lUES5cLTrQWMbtQlmbzrza9tP3skVIiQ6jCuZWTfaJdsEu7UZb19UcDT8etoGaedD7sEKzvyBFaCeoiY%2FhfwjqhB9WmiT9DIvhE6TCDAOYAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858fee556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43881,"size_decoded":14027,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32026)","md5":"22f75416148991671e580d8f4d2a2387","sha1":"f5071717b9e5e3fe5d3aef69f9f20acf753bc1f8","sha256":"357452f2a55c999ddd3afdcbce2c339d41cf7a01613d9d45ff88a753bb82f21d","sha512":"1c63a740ef7e48fd55f764abb597e3ab1c6d2e6573a99a631457a4bf36555a88804924204abe1cc3d2aa776fa5f0b969e069b41bc188149e1d77066295c75bf0","ssdeep":"768:sYkOuS23jVwcqA5ABQmTNcYcVNGnsYdXAtMUI8BYCQSvbShkb4X6DJ1bfNvj:hDFBQmTNfMR4X6DJ15vj","tlshash":"ed13a749d605276689eb21e62105c40db3f7fb7c6a23c0e475c9c7eb606e80886d77fa","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-06-25T16:58:12.890639Z","times_seen":21963,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/intlTelInput.min.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.633Z","timestamp":1782309876633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/intlTelInput.min.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-4add\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQNCWXy%2FO71pEplZ2vYsOseC8jDPPllCNwC6JRQ59%2Frs7vaKRFdMw0ikrSqcsLSCxY1VsVaL8HrdrB6PV%2B4QFhKoKc%2FVGJfa8zxpqxeQ7yiGDqyd3gI3igEgHpVcgyfaVzRm0bjnArE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858fee656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19165,"size_decoded":4018,"mime_type":"text/css","magic":"ASCII text, with very long lines (19165), with no line terminators","md5":"bbfbb81ae2a109048373c055522af3e7","sha1":"2633992d7ffb86c09f24d14917ff3c09ac9d3fb3","sha256":"37babaca48709638e0b19f7d7803d653fc52781bbed084acca197f00eaa64e92","sha512":"964f4aae69145fc1b797e76abeca24c2b50a356241dda1930ee13affc2d4943746c7a573ccc6ec16904dada2b11802ef254b3f16319805330d9f558e327bf8a0","ssdeep":"192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSj:6wRWXhK6jU+4vTixaACaglSj","tlshash":"e8821f1709a32429f627d5a261708eb637278c0bf4264fba49153e7ca3825d51df3fe2","first_seen":"2023-04-19T12:30:21Z","last_seen":"2026-06-24T14:05:07.255663Z","times_seen":61,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/utils.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.638Z","timestamp":1782309876638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-3d750\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=servYpIJDEdhhQFf19fvFxSMSrczOft2QEvxBRsEvDyFrEkhpqTu16YAchwIvHsEltuf1LuMis9HFh5tXNlfSb8XWPr0q2NIxS9zMdUl9rtqfYehhT0KA5mgaW5fb4cofpB2hmYeLMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48590eea56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251728,"size_decoded":75098,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"85f88ba750d38b98d54f8b4afadc4df9","sha1":"bd4c971b82de3d095f54837b68c08c5dcd1abecf","sha256":"b646dbfe618a51842d1a348601fff46100b4b36d924e0d740553764b0d7111ce","sha512":"eac2a972eb22410fef381594d28b8d7ac764943ce0c32c277fedb9e5308c02cfa7ebc8e70ea6830b782dd35a1f616af2e2645d08747ef2ea31f3c1d3dd804e75","ssdeep":"3072:g5M0n8lAJjGs3OwPss3MwPT6Or/t2xrmnmOdGY9wIpUsvhkXk4Lmt67QdEN/w0qi:g5MzGB2bxrmnmO6HH","tlshash":"b934dfebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2023-03-08T20:10:50Z","last_seen":"2026-06-24T14:05:07.256415Z","times_seen":568,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/jquery.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.629Z","timestamp":1782309876629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-15e40\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZ6IMYRLjbJ5WJYWA0xkH3WZMyx1Xvzhz8OJ5kzWMYx1lUDpM7N2DIfrn9V25fQr%2Bo3dyOhjXfknx8ExDHOWOb2eHDt4PRhVShzl0R2MQhsgptaV6yUvUARzXg6dj1YoUNIMqArA6cM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858fee456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89664,"size_decoded":36827,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"00727d1d5d9c90f7de826f1a4a9cc632","sha1":"ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2","sha256":"a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74","sha512":"69528a4518bf43f615fb89a3a0a06c138c771fe0647a0a0cfde9b8e8d3650aa3539946000e305b78d79f371615ee0894a74571202b6a76b6ea53b89569e64d5c","ssdeep":"1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH","tlshash":"5393f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:28:27Z","last_seen":"2026-06-25T20:24:35.904041Z","times_seen":32383,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/logo.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.652Z","timestamp":1782309876652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-1142\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDYC1AMjJ74t%2B07jEcuXMwZyNLLVzdKyR864X0b1%2FVEnSxaarKD54n824lIgZ2od1gmtmI6vJ5DxdiZnbkP1yPWrlyCAU78%2FFjnWvuly0S%2F6hAG5mgHPj8njkD%2FXdQw9HPcUTO16W7c%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48591eef56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4418,"size_decoded":2662,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"30b91c1db8dacfbf7e7a8dcb7b544771","sha1":"565cd99c9a7aeb00bb75fc429be62780e7f04701","sha256":"9a5be5ee39f3d902e1c10447d163139640ec101c60f4003958f0cdc35290063c","sha512":"523c7626c005284c3ab9daeede40840b8d0e53f52af2cfc92b91fdf384f42a213b44b8df0e46917c9b013de58f7b37a858ac487b095e9c95ce96ee197b7e48e0","ssdeep":"96:yfnYA0JsXyxsL5eRYxR9w+ssXuCA/UhrsaFhfteS:uYA0c7Zss+H/UhRnt9","tlshash":"489165d7f3b0b3f4d8c6875a9739003d7d4a947e6a35cb2c836ccab162d7658445c8a4","first_seen":"2026-06-24T14:04:17.215465Z","last_seen":"2026-06-24T14:05:07.257812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/phone.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.024Z","timestamp":1782309877024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/phone.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a0ea80e-2c5a0\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiupRtYZmHsQLSRYIOxFxkz6VJaHqmdr78bxIfWwhMSnXs6MPRBqIviQffOk9XS%2BXhk5iQ0owGdhfoLuO2HGUG4VeuxuNonadRzMJTuEapz6WIBnt1NO3cuJH7CzHmn8AhLN2b9HDlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c485b6f0d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181664,"size_decoded":182448,"mime_type":"image/png","magic":"PNG image data, 752 x 1532, 8-bit colormap, non-interlaced","md5":"01f4599544ce5ea8d05ce30bbbecd685","sha1":"02399f52a933796fcfcd34764f9feabdb51f6e78","sha256":"48db3a6597b385611968c3d1b46c5aba4d0d186d35458fd3acd81852ad79fdad","sha512":"f5a958a01062fb7a9923f97130a405fd1d03f5420c9d051ece6f5f3ff5f3b4e09779195f17b583217831b48f2a2efe63a10fae2190a67ff9cd8bc66cbbd66398","ssdeep":"3072:JE5P+pUflUzA29Usu7SPYiLmLv+Qp70ZRaufzqgH/CZ8rvALCQjHd+56k:JEeU9QA2I7SrCLvzpgvayzqkCZuAfj9C","tlshash":"3f042302c9cc5c2a95a1e96d3051ae31e84e5a4bba3294ee6737737ee9f1c11440ef1d","first_seen":"2026-06-24T14:04:17.257376Z","last_seen":"2026-06-24T14:05:07.25929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/intlTelInput.min.css@v=2.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.613Z","timestamp":1782309876613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/intlTelInput.min.css@v=2.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 10:54:10 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ee452-62b1\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdZ50HN%2BaT5SUi0HgNFDqFq%2B34xnVUWQiBcTWuefySvLp60ZTPmVKnAp%2B2gMTEIwKl7cx1wuFdKf34JtSgUsd1F2NRbuM4b1K3lORYLUeBWV96swWaEzx3gCJ890EROgEg7aMh%2B7Kg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858dede56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25265,"size_decoded":4334,"mime_type":"text/css","magic":"ASCII text","md5":"16417bd404fffaf2387e70b3c50fa757","sha1":"c995f6e9323769cb8f81c2105e6dcfbc56096a15","sha256":"04ce566e74691f4c17592d6662bf8cbf6b5e3b45fde9e7fb4e6a50d6b55d5954","sha512":"d20348843f62374289b344c8d89fd0036c2e3b7f89eca7dbad41295e9fdb0315cde4225edac56c13659cadda51c5df41e3fbdb2fc7e661b4d743ca788da4c453","ssdeep":"384:HzITF7FWKTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWK/Hib","tlshash":"f0b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2024-05-10T20:55:53Z","last_seen":"2026-06-24T14:05:07.260976Z","times_seen":20,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/intlTelInput.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.634Z","timestamp":1782309876634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/intlTelInput.min.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-734f\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEEMo0ZOdWs6xcRGUS4hCCw7U%2BHKEKTC7elEmJd8FRdOAjyCi6stLFWt5V2hOZIUJeiQlEWpbXOEnHT1ZTMC0lfvAXH7fzcu%2BYClHqkYNmhqDBTDt9tF6CH2DTibDmfua%2BrE7KJ%2BY5g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858fee756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29519,"size_decoded":12927,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26956)","md5":"401b851874ecb55a647b27dd3a330f49","sha1":"505e6d88158b926bd85c3f9e9180124b87b2342e","sha256":"4bfb8afc7addf4495ba4c95bc5b822553ef97ca8c72f07dede2c39bc278ae78c","sha512":"146da385e01def9278734d99fc1963d2f5c3acc15ee81e41999f23466a75e251df4f684689ed419e5ce7bab039e549263db3829448d572f304b5dc8021183c9d","ssdeep":"768:XsqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCYuR:BfUQWodCjgtmKgNzazCv","tlshash":"76d20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","first_seen":"2023-04-07T15:42:11Z","last_seen":"2026-06-24T14:05:07.262261Z","times_seen":168,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/cookieconsent.min.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.642Z","timestamp":1782309876642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/cookieconsent.min.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-fe0\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSt8Cz%2FqwMpq90MXXvdRHWjpzUovWw7KEpGPofhej5WwzMHFCGF6Hjo5eHGTWYNBzzM4vhVgvJ%2F6yF3jIDQKWO4yqQ4irtC6EFIWrSsFnR7hFwcJCnQR69y3rFl8O07W3VMHkfi5m1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c48590eed56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4064,"size_decoded":2055,"mime_type":"text/css","magic":"ASCII text, with very long lines (1277)","md5":"ac9205ab7ec136ebf36183a9d1744315","sha1":"b080cf0ca19e8ed0bd8babcddc97823f7ef5c0cf","sha256":"79b378e8f3c1fece39a1472a2e7d920ab80eb5881525a1622d9dbaa954aa23c3","sha512":"391f04ba19aae2057cf3c88291b35eaff2b8bc5a54275584990ae552a865fd68230c5db2b15cd89db90ce2bfa0e0a37907471862b4380f4baf3f36f6705a1056","ssdeep":"","tlshash":"33811f63ee12601d90bb96827d92624532adfc10d5eb36c6f50dc2506bcf18f4f7a6c4","first_seen":"2023-04-06T07:35:49Z","last_seen":"2026-06-25T15:59:25.366065Z","times_seen":2230,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/app.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.645Z","timestamp":1782309876645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a0ea80e-221\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FknCXLB%2Bl88Ageo72%2FGcJl65puuoNVI4plGMVHFm5YiB3atgSBR5vy5%2FwbD1yS94LJZ9Ha%2BaxU4LkIdOo7A169PeyWvu0mZ3sgfM2OM3ci08%2FnAf8Hej5ZRRtl6kyZmAng1MD6Z2HsA%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48590eee56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":1001,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"bb4e47c5a4fff91213f1d962b8f05b22","sha1":"ce56770417989f8f4e56703d7a4863fbc667b54d","sha256":"d688b08cfdc7b14f00f714a0187ff1f5701256ad106126c8f3f23a31d344d98d","sha512":"cda79b23377fccf6153754d5932817099270bc7da969c6d474f3c963bd8c0c75c5df14bbfa54bd252a3f62a41433dcef817537514af3922c0ea0206ccd12b50f","ssdeep":"","tlshash":"47f0bb0679b0787560bbb46f910b58403d285886920bd150f8fe9d791f91374e57382b","first_seen":"2026-06-24T14:04:17.243928Z","last_seen":"2026-06-24T14:05:07.265069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/logo-2.svg","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.660Z","timestamp":1782309876660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/logo-2.svg HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a0ea80e-1244\"\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMTBS3vXGyP1Mk1iECm0R5ICmcpM8A1Xq5Mvaw%2BKhIcHMJziGv5EbnYeWmfnJTV6jzE4%2BaeVyjChauaeH5IaeeVt9vT7d%2Bsz9wZOAvN4YY6aRfL%2FgJIi%2BcuDO5sPFg3ftUq9jMK5K3E%3D\"}]}\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a10c48592ef756ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4676,"size_decoded":2807,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ea3192c4d11eaa1f727af3f2c67b4aa","sha1":"350070374d06b3ed911be864abff8e5c9cbd4786","sha256":"44748a6dc49996773292e3fea045ccb91a4af8c9c1d0a33c351fed54ec60ccdc","sha512":"dff9a86b1fa3b14b26bf52182e72ee0f57d90c7575c1bbf089e3244afe18d393443fe2848b02c25ae39803ea4a47b1476e6377b5f266e2b72bd7addd4dad6cb3","ssdeep":"96:nU3bOZ8RlGipBICZ2LnyjOjIg9P36a80hhcD75K5/Fd:UpRM8mry8536Ho5D","tlshash":"9ea186c9fb7461b0edc847ac86144e7d36af18fd27769a6843b80ba4f2c594c44a88d4","first_seen":"2026-06-24T14:04:17.267559Z","last_seen":"2026-06-24T14:05:07.26702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/body-bg.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.020Z","timestamp":1782309877020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/body-bg.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a0ea80e-141299\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAohJljgT1VK%2BqyGY3w3kjXu%2B%2BxpAYhROwJEi0RdsndiTIXOHbywSrNWqFQSJiV62pxUfxbKIGey%2BIRsGPrWBvzMTy0MyNFsg95CPgJJqEri7qNfCvAQmVhm1%2BDVA1DRLYSY0Z8iG1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c485b6f0b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315481,"size_decoded":1313200,"mime_type":"image/png","magic":"PNG image data, 1440 x 10255, 8-bit colormap, non-interlaced","md5":"be2ef812e7af9fe0571ab9ff837b3a7a","sha1":"417ad102ca846f35680174be33deb3550f7f76f5","sha256":"1271ed4e39bcf42d64f78e130e967eb1996f6d109b95e64fa95e80c97bfec6dc","sha512":"35e05aacb6893912232faee99730955642e0b8ec26086964c240d241865a93449e5b5bdbfabf02acda0658a8b008e6faacbc926d84e26be6ecf8131be5a3572c","ssdeep":"24576:rqcBXomDIUCNYYfZRh6cuoDqD+eAaTJY/j9xErVMksm:rqchomI9Z//uoa+eAr/fErVM7m","tlshash":"3c2523fadabff078f57fc0b08d5a1980f42619729c65cfa15d0ac88a9a1fe609f54740","first_seen":"2026-06-24T14:04:17.247963Z","last_seen":"2026-06-24T14:05:07.268419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/15722/Exo2-Medium.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.078Z","timestamp":1782309877078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /s/15722/Exo2-Medium.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://recovery-dispute.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/css/exo-2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: font/woff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv6IXSsgbeX48FbKFaKCS6KkzCz5Uoir%2FZBFNGo4p0T8ma4tB0q0NzUbGcTvPWHvyph52U9LNN5UCh%2B1bUkpTyN2vcKh6fcewaT73HVyXR%2Fh%2FfrWQBx%2B8gWsurh8KeAXTJ0UH70%3D\"}]}\r\nlast-modified: Sat, 05 Feb 2022 02:00:38 GMT\r\netag: \"bf34-5d73bbbdb6c49\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 52\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 48948\r\ncf-ray: a10c485bcbd156b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48948,"size_decoded":49696,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 48948, version 0.0","md5":"8493c36bb2bb0a944789ca2821537529","sha1":"634d4ec8a5021c6fac1e35ae16bc4eec768b5c51","sha256":"ca1ca30523d4de2d747916a62087605a685f22b107d1d8c46a417c4a85293caf","sha512":"43547d1ede2aa7aead82024e6c00ce4cd5728cac1ee413ec6fd67d3639bdcb278f64331dc316fa78c2ba81bc0bbfb4d83cd825a2005065c3e930c16c4121c31c","ssdeep":"768:EOHQ+F1QqqirHqs1RdV0+7Kw3aEN0P4sEc5qPnWOJ8vELAv6IT7YVLZdm:PwQQqqijt1Rb0+eeXU4YqPWsLAfT7Y5m","tlshash":"e023f20188f7266ce1660af5f87d01119676e15acefde93603f1244e5bc63ed962813e","first_seen":"2026-04-24T05:03:56.15287Z","last_seen":"2026-06-24T14:05:07.26977Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"172.67.70.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.095Z","timestamp":1782309877095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://recovery-dispute.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Wed, 24 Jun 2026 14:03:44 GMT\r\nx-request-id: e3500f72d52e5a66ac65013cf85cd7d7-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mal0yX6wYNwHEMLDwnSvQtVmVAgbRQ0%2FxmFOUGQB%2B7DDQOq6LV7f%2FUGSebUDvbKLZITYgxQdgaFLppxzgbOIIRvr9v9%2FJC6hEOk4Pv2HvRER%2FF42wlRLk74yYYDGDA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nage: 53\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a10c485bfbc65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":991,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-06-25T12:59:43.577244Z","times_seen":80,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":3,"connect":13,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/media.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.626Z","timestamp":1782309876626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/media.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-1153\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Fbf0414ojKRLzL%2B8vdYN8e9YALeddf6o2DulAuqihfVLTaLtYH%2B0MMSBuIe%2B3FQMIU9%2FTpfsHZZsRePVz3UH%2Ba0l%2FSKKNDsEk7iXF6fAw8ie5xdKpwQNlGw0gJEB20g1Ndr%2FMl97Jk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858eee356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4435,"size_decoded":1877,"mime_type":"text/css","magic":"ASCII text","md5":"224566a210171260d445276aae76425a","sha1":"dce86745ed303015eced7fed86d6f07df9676c2d","sha256":"9171e8eb04f38854d0199f1d542a3dff54fc62c8cf3ef15e21adc89986d6c248","sha512":"b723db5608c05f05b05683d1bfd57936879b84b2b085acbe3c5e5499eb8fcfb1499e06d1daa3864635403a6efe7e4d90ca50b3302dd273b529187248256b7400","ssdeep":"96:UXLcF1Y6LuVnVpQ46vonpMhvEuAIRF0mFjtkYXGV1/W7yDE7JnOO3cU:UXLaLnvMMhvHAIRFxjtkYEW7yoFsU","tlshash":"86919a9f79e116197817ba2817ee27517258c013d24eecb73cdea22cdfc569089d138e","first_seen":"2026-06-24T14:04:17.239155Z","last_seen":"2026-06-24T14:05:07.271678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/js/intlTelInput-jquery.min.js","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.636Z","timestamp":1782309876636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /js/intlTelInput-jquery.min.js HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a0ea80e-7508\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVvZKkxNngJfIoeOQkYnidYdR5ynIqWmq0Kmdl0vYCxIwSYo1TzlqdRAcGjmpdM1Ws5lwmw3S%2FSm4W2SWtIdIwtHlCN8aYdjTweVBe6%2BmZW8OTO9UJD%2FSV%2BBpO7m9LPNbu%2FA5o2WNaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858fee856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29960,"size_decoded":13153,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26989)","md5":"73a30f84b8c4078fb6a5c4092c3c63ef","sha1":"5985e47497b08efc89563da5b3ca0e951e4d7262","sha256":"ae78b655f3daf2070e84a8eb954e439ebd886309c7dfed3fa7bf0647f81fb188","sha512":"8513f02ad980c18541b928263d746effa1e5f9ed95f56b9241364858b9a6debf20f47f18e0855e7e37304be7b75c0b32a001602b4906b2596b7074de8a7ba36f","ssdeep":"768:lrqD7GzOoS+D45YdR3QWVrdNu8Oxwt0q3vTpzaDPCgei:0fUQWVLujwt0qNzajCZi","tlshash":"cfd2099973511237a89aa0a1687f16472ebf30155a84cc9cb87ecdcc0fecec9a1b5734","first_seen":"2023-04-08T02:40:26Z","last_seen":"2026-06-24T14:05:07.273164Z","times_seen":190,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/images/flags.png","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:37.099Z","timestamp":1782309877099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /images/flags.png HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/css/intlTelInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=4,i\r\netag: W/\"6a0ea80e-114c9\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjJWIdU%2F%2BvxFEIdKmUnfMqv%2Bj9lwEy3GcvfzSCORXrkzRE%2BpI9Cb1sSgfd5nClpBHwBPvdeMwGcu49Mow9JesJ%2FItokRY1GTBIcnaMY6ZTfX9y6l0E3ZDprLDy0n5XTqf5iUlnk%2BUCg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c485bef1056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":71616,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-06-25T20:36:47.730275Z","times_seen":24447,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T14:04:33.117Z","timestamp":1782309873117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4pcUow1V7s9lOZNyMrubCEUwaLdsEp4zYgPnb89gD18NVYv1qvkQCpPjqQXqXVnBCuUGcshMrnBOVldCSrsOlPBY8iyxClMqIwMpWvKj8N6CDbJKErTktsLOdyb1u7m4oVKS9GCiII%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a10c4856cc6b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":49160,"size_decoded":14947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"03838f4e02d84faed05da829efb17922","sha1":"8170fe17cce2aa0740802e36e6401bb8b6b3e2af","sha256":"eb85070604ee5118b7fd6b84e1b65268fdccc5c3a834b5cc1d2c0f0070589b2e","sha512":"a4294e5e70a5c65c70d56153ccd4741d9a81efb82f6c58cfcdf311597c4c1d0e0f5ff2de04e2dcc9914e1ee3fcb1377e996eff568919505f44ed334b6dfd19a4","ssdeep":"1536:aSct6SuL2/jGfgTLYfgXTqsLhen1UWxuVmIvlHKNE80soUvQfaTz6CbD0A26mCMN:aSctVuL2/jGfgPnqZMCrukrm","tlshash":"f623a75179e85333228b6395b56a9a92bb58d83f7b664201396cc1782fc2e34d7333d8","first_seen":"2026-06-24T14:04:17.269666Z","last_seen":"2026-06-24T14:05:07.27485Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3212,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":44,"receive":0,"ssl":3163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/slick-theme.min.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.620Z","timestamp":1782309876620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/slick-theme.min.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-96f\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mw2X%2B9L2%2Fz7sBUg2j3yfEmWB9ZsKYDzx%2B9lgbmMY5sq61M3NDDOrH50eRdwwTI%2BePNJ5wQMrSISFYSk18oeNAIi2qsZLwtYciB%2F2%2BJy9RG0UFp1rVJ2PfniyMrLU%2FOx6j7MhHOi1LJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858eee056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2415,"size_decoded":1588,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2357)","md5":"97151978fcdecccd4d36b3de1f6e1edc","sha1":"b18f28d3db72b2bf0a164aeb53530ffcb80213db","sha256":"92950718f7c916111c683aeb30bc37b3d8a98f7414e5fc5709bafce57de1e963","sha512":"f126757b39f063f2d59695e28d72aa1f85fcb931d27c9c1f2ea0045bd85fdff7f6900f50ac302c9cc18d37bf0d674e018be207906a8cc50d04aee362052982f9","ssdeep":"","tlshash":"904143395261b6cb4063ca20bb83828531c37953b6731af9f63e536cc0cd0991fe8b5a","first_seen":"2024-08-19T18:17:04.336868Z","last_seen":"2026-06-24T14:05:07.276307Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recovery-dispute.cyou/css/burger.css","fqdn":"recovery-dispute.cyou","domain":"recovery-dispute.cyou","tld":"cyou"},"ip":{"addr":"172.67.168.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recovery-dispute.cyou/","date":"2026-06-24T14:04:36.622Z","timestamp":1782309876622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"recovery-dispute.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 May 2026 16:04:13 GMT","end":"Sat, 22 Aug 2026 16:04:12 GMT"},"fingerprint":{"sha1":"5A:A5:8A:C8:FF:68:75:55:A8:BB:FE:FE:E9:B9:5F:62:E2:0C:B8:C6","sha256":"E5:34:24:3F:C4:9A:28:C7:FA:29:36:11:5C:A4:3B:95:EC:1E:81:E6:6C:61:A0:0C:A7:8E:ED:A3:F4:8C:2C:87"}}},"request":{"raw":"GET /css/burger.css HTTP/1.1\r\nHost: recovery-dispute.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://recovery-dispute.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 14:04:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 06:37:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a0ea80e-b7e\"\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRbCc7k6M18VTYWzN%2BCgLX4m4lHq3WIG3rvVuO8UV5gaxuOzEVwDn1xdlkgCR%2FqpIW35G6mHTBSff70Gu4cX6clxpnoqRfLhF%2F0OVpocIuQ6Q5RwoYBhh7%2BVcGr2vksHddQ0w5OudUY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10c4858eee156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2942,"size_decoded":1524,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5177d9199b2dc3acdb9768a225adcdda","sha1":"226b52d62b1e0ad6d5e31df8a493419a644d340d","sha256":"6da105c79ab31940ec2dc403eba50817f661382b866f939293580838480d8bc1","sha512":"491e2305781efcec655b198c62e71681a54ccdc9c9c34610010c407e1d523f15bd269acfd13930ffa391acf2d1d3fed260a6eec49a7681f5766163f78bdf00b6","ssdeep":"","tlshash":"f651ba64720132049a3faaad0fd48729e138c2536f03155c7ad716d64ff7d58a2e2fda","first_seen":"2026-06-24T14:04:17.237312Z","last_seen":"2026-06-24T14:05:07.277199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"recovery-dispute.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}