{"report_id":"4ba3a88c-b989-44c5-b2a8-e0963ee9947d","version":6,"status":"done","tags":[],"date":"2026-04-23T15:35:07Z","url":{"schema":"http","addr":"seven7.vip/group.html","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"3.164.240.125","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"seven7.vip/pages/home/Home","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"title":"seven7.vip/group.html","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"seven7.vip/group.html","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"3.164.240.125","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-28T15:35:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":7}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-23T15:34:47Z","timestamp":1776958487,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49600,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-04-23T15:34:47.611089+0000\",\"flow_id\":964889033519333,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":49600,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3510,\"start\":\"2026-04-23T15:34:47.602341+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"ws.4kgame.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"ws.4kgame.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"game7p.u444.us","ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-03-17T17:43:35.077241Z","last_seen":"2026-04-19T09:13:21.091208Z","alert_count":132,"request_count":44,"received_data":147658,"sent_data":26651,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ws.4kgame.us","ip":{"addr":"3.164.240.22","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-06-27","domain_rank":0,"first_seen":"2026-03-04T09:22:20.740833Z","last_seen":"2026-04-19T09:13:20.988584Z","alert_count":2,"request_count":1,"received_data":363,"sent_data":716,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-04-20T12:19:36.258607Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"seven7.vip","ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-08-20","domain_rank":0,"first_seen":"2025-08-20T21:31:41.160018Z","last_seen":"2026-03-19T09:33:08.404887Z","alert_count":178,"request_count":89,"received_data":3025868,"sent_data":44474,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s3.us-east-1.amazonaws.com","ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2017-11-22T15:47:32Z","last_seen":"2026-04-22T19:09:20.698611Z","alert_count":0,"request_count":20,"received_data":974314,"sent_data":9990,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s3.us-west-1.amazonaws.com","ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2016-02-11T23:13:55Z","last_seen":"2026-04-17T17:37:18.82486Z","alert_count":0,"request_count":30,"received_data":1240108,"sent_data":14769,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"seven7.vip/assets/index-Ccu6oc9r.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"632e87ff8508810c894fdc27d1b08616","sha1":"2d4ee9ac352575e3dca55fcc770a14a556d96287","sha256":"8d13ebab7d649e691c78c2b7881509be46e5365dce325b01d0935c2f1002b470","sha512":"32fab71900348278f6d9b07491da13918fbded075a7a1efa8c90967b21ef0ff0dc2d309f7a6edf01bfb084a33c16c8e8569445ec0746b6267ece87c8e4d27243","ssdeep":"12288:gaGdXbL8Dgb2wkbAtASr4jZ01qnYa+P+JRZiSG2Hn2GuAsbXPo3UZH7qU:gaGtbL8Dgb2wttASr4t0EYa+P+JRZiSA","tlshash":"87946d943281b43243f625e2607b1113b3391a15740ad0c8f16d9dea3e7ad8aa7b7f7d","size":417892,"data":"","first_seen":"2026-03-17T17:43:41.196008Z","last_seen":"2026-04-29T23:30:42.043106Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/Notice.WQTXd983.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ffba2cd6634507c0f872446195b8f703","sha1":"b68a3deff41250493cc0555b06013cc0e4688c17","sha256":"30d2489351411847da00d6426f88d0e4585c8f08e4e0f1ec9d2522aa1c6104cc","sha512":"403f3191f53bcb39e3fe09b2228523a529ce1de25a9b73077288129d9d1f3031f69ca48efd272fd50d702d787443a0278b1d5a78d18c038ddababb3c413e31b2","ssdeep":"","tlshash":"3641615ee861c6b183e5dcccd4e0001791272fd90130c6a0e1ff9e169a7ed22e166f29","size":2028,"data":"","first_seen":"2026-03-17T17:43:41.188503Z","last_seen":"2026-04-29T23:30:42.041401Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/constant.C5_EDeO_.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"98fd658f7451fae68930b90e71278ad8","sha1":"38ae6e3a76511ec530caeeb98f88b45de2bda8b7","sha256":"2251fc773b1f8fb795ec53776b59c7cf265c2585fa445d5ac8cd155baf92ce97","sha512":"eeabc203bbe6f10721be844046785fff6fa26f45a478139232e8b5aa507ba1f3d547f1aacf3f20eb1ab7bf0448622cfc30232a9a140e6b444b85349962605e74","ssdeep":"","tlshash":"92e0d826978e50f1c936ff0122caa556aba1155264be0aa01698ff800389481e3ddf9d","size":388,"data":"","first_seen":"2026-03-04T09:22:28.72857Z","last_seen":"2026-04-29T23:30:42.049107Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/9.C0ihX22C.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a5bed91311938e6aad27f544c0529b92","sha1":"ee7c1997797a857fc92bfc034c67b47c1cd9f2fd","sha256":"8d0cce6e2cf0db70a60a449a2169b1321dfa274276155a17039f573289486ec3","sha512":"a27c91e129f72f4a990966b3146177c5b196de385014aac39acae3126e9003cd608cb92bad6e38c0b1c1eacb654d96a868e28f154f90a4bfe103541d05614e0d","ssdeep":"","tlshash":"4e513b73992252600a67b8e0607f4cb89eefb1319e795163f17dd4d8e59702087af270","size":2959,"data":"","first_seen":"2025-11-30T16:25:47.843793Z","last_seen":"2026-04-29T23:30:42.021571Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/util.DGNARWfw.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"26b2cf9b11518be8eed608d05eca8b15","sha1":"5ab7a19cedd1f5bb39b9887e0e5ffbbf403bebd3","sha256":"b10ed9298cab2dc3a73d58e555d1197ad884a4553236f7f4a03bbd9cacb83c45","sha512":"045330e8da7eaa312861e5c48717cda0a3b9016eea04425d0f07fc04bd087b871d2949945620f9cb5a242203de6c80c15b0baa56c7c7394a564a4673011c41c6","ssdeep":"","tlshash":"b62103d83242f1f5834c11d801781520f15d4dd6367b8694ca9edd177722858f2baba8","size":1125,"data":"","first_seen":"2026-03-17T17:43:41.213637Z","last_seen":"2026-04-29T23:30:42.053608Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-index-index.ClxU0WMF.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e53ffe899652d64e7238533724980b5","sha1":"14047ee5889d5a44ab0b5422a05022941018daee","sha256":"30104b78078deaeead0f3b167a797394904b0c81539dd20f2981d92b8c66da93","sha512":"475ba200ce2beaa9908088059bba31308463545295a75e1037d5896fc0a7695057f6e20a6c7ee6ee40c67903c2a1b150763466b06352731aa4127c1b7339a9ae","ssdeep":"","tlshash":"8141a83c935f9574054614cd267a1078e039ab282c76ccd17b1f06212dec5dba0debb8","size":1972,"data":"","first_seen":"2026-03-17T17:43:41.207032Z","last_seen":"2026-04-29T23:30:42.029059Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useMailStore.Is4DhXSq.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b3148f0f12baa3c9750842324d0690e7","sha1":"5fe00729faebbc87c6371c81ffe604fadc4ec0b0","sha256":"fcc61f5cb97669e569d4c37238f2f119392f5978ad6148584feb2c6714be756e","sha512":"cdd040b88b849d6f8115ef23a206a8b3e847d9e74828f5ff915617b9c4cb70521fe378b6a319c15ce3c96763b9caa310c146b1e0a5c98e94a7c4fa699b4f7441","ssdeep":"","tlshash":"0251239cd1cb72764165e68a70137752826cf2079c40917a7f9df7817f18e87b486e31","size":2883,"data":"","first_seen":"2026-03-17T17:43:41.208347Z","last_seen":"2026-04-29T23:30:42.036301Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useGameStore.DXEnpbxE.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4409d22f141c8e8aa33e5bf57fa12a92","sha1":"4a6cbcac971113ff907775f2419326bb3661ca9d","sha256":"88f9383d7713e71cc61831682a3dd58c73c16ac73ecb65d7bd3800d186811cf5","sha512":"8b4b95b14e27e6b374a6e8acb4b2e330c5294258f688d5d3e5b01b74233954a7f252f172ba0c3298de1ddc7adee4206e4617599cef476d72c30768f48b0376cf","ssdeep":"192:Ty7MuVj9n7CW0UjrvGsRhYyzeuutOA4dzAWbedWvp:Tqn2Q1eRs","tlshash":"c6d1854b4b48c87110fd0cab598596e1c21494a748449dd4bbf88af7de34d8fbad7732","size":6260,"data":"","first_seen":"2026-03-17T17:43:41.241076Z","last_seen":"2026-04-29T23:30:42.126634Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/turntable.DrB9UqG6.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a5029de6c0b9f63e6fdcf5fca6639376","sha1":"57c3bc5950936037df29efd5f8c14f08dcc7bbcd","sha256":"f18a1b59ea2aa0ba8de5971b595a1a662d32788e12c1954041662ba9da6865a0","sha512":"ba22e56c9f32a1ff0bec5357b86aa748a0ea0fd5fda2fbe481f613b375e9e33e3f570393a7375d8b7a2f866c8a2821ae3d0f3c78d652e8f7d1546e66b71490bd","ssdeep":"","tlshash":"b8e0d8bc649ca9b3730bd10f674ce7105868e26a692406f414c85b60ea114d4f40dd08","size":362,"data":"","first_seen":"2026-03-17T17:43:41.162046Z","last_seen":"2026-04-29T23:30:42.150652Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/wheel.Cl6SL9xi.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e5fffb5e843e01d6eabf7451bd356b20","sha1":"a039ca9b9f615eae25cb7eaba731c5e88508e6cf","sha256":"817aa6541b24364a8b52fb1f6a10390472b2001263b2b3af70bf2600a32fb178","sha512":"632733306f9511caed93903b1bde2d9aa54af93955b957f2f9f206aad370b5cf42899bb7a9fdbfbc72f305425bca520be3fad4de2ed8889c895a0ac07488cd9b","ssdeep":"","tlshash":"2ae086cdbcadcdf3122b4e4a9e0cd210e4b0e3f9512081c868c93315da368c57c1d404","size":311,"data":"","first_seen":"2026-03-17T17:43:41.201735Z","last_seen":"2026-04-29T23:30:42.082376Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useDepositStore.BjajlgA0.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1c2b85ff4921ca29024090b245074165","sha1":"580d749de4d4c1dbd97ebc25051aec45729f58e5","sha256":"55b2d8434de19b1b22926ab30a2337eebe3fa4e21ad3e62bfc47c84894ddf277","sha512":"7be273fd32522725b548c7fdb070cba321eb6072e99a2aa97c6e104e10c5ae31a5bbc3e8016fffc277fc8342fc11c0e588b30523d2e9a34c73a2653427f57313","ssdeep":"","tlshash":"353145cde2f481b209e7dfbc88759912fe20776c04d36a4097dd6a20375cd47a27ea24","size":1727,"data":"","first_seen":"2026-03-17T17:43:41.173569Z","last_seen":"2026-04-29T23:30:42.04623Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/uni-app.es.DArlo3Hh.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e50699aebab8da9ffdd0dbd0bb616c19","sha1":"97bbb4d0548b3a978f6d94e294d36db9580d5dad","sha256":"30670f50011b8bd30d6ffa8d440df332734b559891248a82fc0dc32e4f06df08","sha512":"3b0be6f77e1f08eab276200ce354a68116dd7020a8ac49adf26df4882ceb63827deb994fcc464a53b17f86e0c1abdbcbe5b42cd746e4e50f2ff084681392ebd0","ssdeep":"","tlshash":"32d0a79ea459e7ba281b848d3038190f8158b4f62e7886c0928b4761e670459d13c511","size":243,"data":"","first_seen":"2026-03-17T17:43:41.184381Z","last_seen":"2026-04-29T23:30:42.110809Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/home.gGo2YeXb.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7878665219ee2a70184a02db0afcfc8d","sha1":"de123facc2ddc76de0605bccddeece372c6f1adb","sha256":"250e109a00bff8dde45a8c4f5a8908741c912d280533fd3f01c6ae61af6517da","sha512":"59c757fffab0db51151d11383067c5fc2725d18609c8d3a5efcc5a16fc483cfcf69f589c4d1abfc6f5bc1d04f7e3293a181d61f23649b795227dc7b77c712b7b","ssdeep":"","tlshash":"1af02e6db4dcc97332577b8f9218eb403ea4e3ba503449dc4c8c27209b66cec702995c","size":491,"data":"","first_seen":"2026-03-17T17:43:41.224418Z","last_seen":"2026-04-29T23:30:42.045355Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/btn_close.CTrYlZKH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"987ebfdce42147ae4abbee784242458c","sha1":"6f7099e7fd39a58fc29447e2e4299aeabc0fcab7","sha256":"46541f032a1fc5bb706895a74307e493079f2f340563821d451725c65b294f71","sha512":"6bdbf020065f37afd4a49546f14811ebfccc5b8d795d5308b8b0a29779bac3b1abc675bddc37428d459f3132338fc41e1611a803fdecd6731b1816617cdc0dc7","ssdeep":"","tlshash":"db31e9b7408bee63d6d94c4ca94f80084d72ce01ee51f4744974534d9d8bce09a7a174","size":1761,"data":"","first_seen":"2025-11-30T16:25:47.818224Z","last_seen":"2026-04-29T23:30:42.047112Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/WithdrawUnlock.BjgYUAU5.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dcb961b2d194d3f8cb09809133b5329c","sha1":"80f5bd62c0c1f4554a2634e9b604a42289b7baab","sha256":"bf018a5f42b646d726d53a1bc2d268628e5c40c7d2086eac144ab412fc447f41","sha512":"7796066b8dee99665fdd6f4930e1553e25eb0b36146de1b9c42c1ef32f62f5254e7a9222d40e9a3e8515b5f33772c54777d3589374767bee0175385cc3101704","ssdeep":"","tlshash":"ae41714eb60bc23c8a61baac56954c14316d4fe9e174985230bded804fe2cb8a71db38","size":2129,"data":"","first_seen":"2026-03-17T17:43:41.151873Z","last_seen":"2026-04-29T23:30:42.108514Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useVipStore.BlOc-6Js.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6ffe33c40c5fe1accee0eddb6a150d2d","sha1":"c80938d6b1a6b854da4fa5db140f20966c5b4214","sha256":"0bc2412c5675c146ab2cbe90c9c448ee9e749172d21fea6dd311adea13b8984f","sha512":"84de130d2936add3be6bd726b3d67517e76afcf01ed4e67ef4e428dfc0c1d8629eb0c27629b8840af2c93a7b4aa193c91beee8a50495e96c7c8ce977a2e89505","ssdeep":"","tlshash":"6421e26f1aca54f7459da9cdc0196101e798ba46e06820999f9f2f11290cc43f1a3f10","size":1200,"data":"","first_seen":"2026-03-17T17:43:41.158197Z","last_seen":"2026-04-29T23:30:42.120197Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useBonusStore.C-NW0A7r.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"74fbba8594c321c89e3d33296df25d3b","sha1":"5e387067ae2d464a0829839ac985876407cc4f24","sha256":"12b138b90cc3747288102269a2491bed62b3ba3898b47d833038dda922cf71ca","sha512":"eedfbb411e827629c51b4d1252312bd5b2bbc5436479b76c8c1a3860aa47eafbcc2f70d81d90656688be84207a9356f1ca4f7a5ef9bb3f2c0b7f9c422001853b","ssdeep":"","tlshash":"758141ee37ca08734469ee88a85d1a57c778775a50404169aecea718bf0cc57f8b2f21","size":4025,"data":"","first_seen":"2026-03-17T17:43:41.262434Z","last_seen":"2026-04-29T23:30:42.031996Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/deposit.QaJbcSWH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6708a634ffbcbb62e0eae57e6f0743b4","sha1":"76f8858e19e3f32e1595b5e5b8fbc125d5f39148","sha256":"27301cf0663b7dec5d7cae640dcec49d9417e6135371ed4a0a93f0834a940b10","sha512":"a2cfe8abb75a1cac148bf60444d7d22acc39d7b7e405f225f79c3a1c7d07975187f7905cf2f33e51b48bff584ac0f0ca66631eb74539ebdbbaab72352959c17b","ssdeep":"","tlshash":"23d0a56cb4e9c5f71145d5fe93540901ab65d76c7371c9c84d4447147526c8e211e654","size":253,"data":"","first_seen":"2026-03-17T17:43:41.156317Z","last_seen":"2026-04-29T23:30:42.07447Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/ProgressBar.B4xsQN7o.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b109fa9dc37f4d8eae89ac1398198216","sha1":"7767083bf9025fc7bc99b6dc882b960e2c5fa995","sha256":"4430191ccc080506406a3fd17b2e14997dcaf463cfc7d4d843284849984dedc3","sha512":"8ac90b3f11b11cd140bf521a96ea587d35e8e56b8fb45324f80e70bee1e861ba44b9cce34b99c29925926a9e5f0c4f72f654495e45bb27871f7b6ae5de64be63","ssdeep":"","tlshash":"a5017b4c7daed2f357934c8c91620100275b0edde237baa59df1022c4323a684dac798","size":691,"data":"","first_seen":"2026-03-17T17:43:41.168112Z","last_seen":"2026-04-29T23:30:42.027568Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/DepositWheel.C3HxVH0l.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"944e4004ff23909900d04d71f2441e10","sha1":"90c4be697819d58df4dd28bbbcb5c02ee2218c6f","sha256":"82de7d7a4e5a1e1aac2e22a079cd44d7f618d68a2d775e0431a1d7de63310d70","sha512":"43a1fc1dcc570a09b679ee0f5103af0af4855cdb3420a9272674d28ccef4695155d5272097afb4cb67b7e01e7514f7f4c8bcd73540d1734110edda3851314605","ssdeep":"384:HRbuIFmKoEaZ3LRSI2H+47ikYocaG0NM3ihpxQysACU56lV10c/pWNU6S3OQ/F2i:HRbH3oE+WH+47ikYo9G0NM3ihpxjCH51","tlshash":"5db22a14ba2d843c93b269d850e8006131363f4e9442b8d571fd5f6f936ec9a35daf3a","size":23421,"data":"","first_seen":"2026-03-17T17:43:41.226369Z","last_seen":"2026-04-29T23:30:42.164298Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-home-Home.C5KUq5WP.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95bfab0536fb2999f84eb15a4bfba0d8","sha1":"634085b76e61d2e9554a6a0cd59e2b910b4f22aa","sha256":"e2831b767d4c19faaf183adbcf83e1ae234264b08bc10609167b27de10a05086","sha512":"a40c7925889658bcd1dfc1699ec0375b99c34e3ce5dc75a12aaab4d0aad42943a63488878bd0923bd415ba0f6fe4eaf60b147617634874f28b06d5eb17d5c591","ssdeep":"6144:UgIyvMuamz2sOAPJH+LoFVIJix/TPrnPt292/ObvXLmxS:D/MuamqRUJeLHix/TPzPt+2/ObsS","tlshash":"ab4428c9b255f03543f3249a40ab4001b37a1e49b80994d4b0f9acaa797ed5862fff7d","size":269842,"data":"","first_seen":"2026-03-17T17:43:41.154303Z","last_seen":"2026-04-29T23:30:42.081458Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"seven7.vip/assets/uni.244911bb.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:45.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/uni.244911bb.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/group.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:21 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-2c53\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: nGvR3Jl-sEyWiK8Vong5x8ot2MCyFHrR212hAQBzDUGGtLsYrinm0A==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11346)","md5":"eaea4edc4c50770a5506c9183243c6b7","sha1":"313d728341974aa6f12c319bf6d3f1c089c1af9d","sha256":"244911bb0f354a3586d4be4f52dc69bd63ae64dde9dfe1d85e8ad94cc459bcab","sha512":"c6bfbba36d865a3d83fec1b1ea06b73809b7942f9496613ea4fb06d353be752c936ea362f8c1e69b77e68c3c71515b253b2a54fedf7679def364a70fcb4cb936","ssdeep":"192:Ujj8LGJ0CQLnWL9MNXVA87eizyXb741OEDyPhN:UXpmLWLL87ei+XHSwN","tlshash":"7a3296319a00163df857cf2a62d1d74f223184b3e9533b1cab753938cead9d5163a789","first_seen":"2025-11-30T16:25:47.849464Z","last_seen":"2026-05-28T12:29:36.925429Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/e8c15c12865c230f0c84ed9648283684.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/e8c15c12865c230f0c84ed9648283684.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9hKYNp5TqiMFR/ut+/0AVYH2xvFpOQTG/cup47pj0WzBpz4NFBpgC0Lb/8Npp3ifPHZhqbV3Bt5XXfwDtH+vCVcToH3ICtq4\r\nx-amz-request-id: 5B3EV3QMPDVFTK3Y\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:00:10 GMT\r\nETag: \"f9d83e7395831b7f2e636ba9c6bc10b5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 62845\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":62845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"f9d83e7395831b7f2e636ba9c6bc10b5","sha1":"3cadaf6caa8b9a947a3c528bc1c6c86a6721110c","sha256":"176fe7539500cb82a3a9a5492d03041282c911b6de5ab082bafd8f9de8b72482","sha512":"feef02f74948a76afffed0e3ce6c1b17501c077800ac6cc93f11023d26d152c8ee1069566adb9f51747ffb2f6bc733aa6a6e700ce655b2b2b9a5c211217cf346","ssdeep":"1536:ak09zgT3S4PAKx3tMlUVq6KIbpKgluQnD/bosb8STbVRe0+Puu9:+9zgTi4oGZk81V/boibTe0K","tlshash":"cf53024c9d982e705e317d62b06cd84da93f583e774f3ce31d11e98b6f82535618183a","first_seen":"2026-03-04T09:22:28.723517Z","last_seen":"2026-04-29T23:30:42.188485Z","times_seen":10,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":115,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/util.DGNARWfw.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/util.DGNARWfw.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-index-index.ClxU0WMF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-465\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: IQ75yjCKT_KPkZH9qCdGOxhXuOb_gQT426R0VnX7D761Ss8Zo9v3yw==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1124)","md5":"26b2cf9b11518be8eed608d05eca8b15","sha1":"5ab7a19cedd1f5bb39b9887e0e5ffbbf403bebd3","sha256":"b10ed9298cab2dc3a73d58e555d1197ad884a4553236f7f4a03bbd9cacb83c45","sha512":"045330e8da7eaa312861e5c48717cda0a3b9016eea04425d0f07fc04bd087b871d2949945620f9cb5a242203de6c80c15b0baa56c7c7394a564a4673011c41c6","ssdeep":"","tlshash":"b62103d83242f1f5834c11d801781520f15d4dd6367b8694ca9edd177722858f2baba8","first_seen":"2026-03-17T17:43:41.213637Z","last_seen":"2026-04-29T23:30:42.053608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/ProgressBar.B4xsQN7o.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/ProgressBar.B4xsQN7o.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 691\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-2b3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 7VwsEH7Ghu0f7Ukh-mrpsyhmvJwpXdqhERCFwLNOb_1olkWFMXc_hA==\r\nage: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":691,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (690)","md5":"b109fa9dc37f4d8eae89ac1398198216","sha1":"7767083bf9025fc7bc99b6dc882b960e2c5fa995","sha256":"4430191ccc080506406a3fd17b2e14997dcaf463cfc7d4d843284849984dedc3","sha512":"8ac90b3f11b11cd140bf521a96ea587d35e8e56b8fb45324f80e70bee1e861ba44b9cce34b99c29925926a9e5f0c4f72f654495e45bb27871f7b6ae5de64be63","ssdeep":"","tlshash":"a5017b4c7daed2f357934c8c91620100275b0edde237baa59df1022c4323a684dac798","first_seen":"2026-03-17T17:43:41.168112Z","last_seen":"2026-04-29T23:30:42.027568Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/turntable.DrB9UqG6.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/turntable.DrB9UqG6.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 362\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: \"69b6c9c4-16a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1ez5ISHoStbUXplDfu-0yQ9YfCRYtJYvD_vShowQeUxp3T0FmFrAdA==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (361)","md5":"a5029de6c0b9f63e6fdcf5fca6639376","sha1":"57c3bc5950936037df29efd5f8c14f08dcc7bbcd","sha256":"f18a1b59ea2aa0ba8de5971b595a1a662d32788e12c1954041662ba9da6865a0","sha512":"ba22e56c9f32a1ff0bec5357b86aa748a0ea0fd5fda2fbe481f613b375e9e33e3f570393a7375d8b7a2f866c8a2821ae3d0f3c78d652e8f7d1546e66b71490bd","ssdeep":"","tlshash":"b8e0d8bc649ca9b3730bd10f674ce7105868e26a692406f414c85b60ea114d4f40dd08","first_seen":"2026-03-17T17:43:41.162046Z","last_seen":"2026-04-29T23:30:42.150652Z","times_seen":8,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/d6a2c8b083df71c21843daec0729bc14.png","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/d6a2c8b083df71c21843daec0729bc14.png HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DXyVFz1h2ykLK+zbd5KCe2Ef/U8RUPFV0g3k44u6zPQpJl7nChDoZrwgKG1I3JxzLy2C/+CfvVW5ED1Q8emINr4LytqdrYpo\r\nx-amz-request-id: 5B375GFPP3VZ8S87\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Sun, 04 Jan 2026 06:09:39 GMT\r\nETag: \"ec5f1ebe6d8048b1f63dc63024120551\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 124709\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":124709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 694 x 230, 8-bit/color RGBA, non-interlaced","md5":"ec5f1ebe6d8048b1f63dc63024120551","sha1":"691e2ebe8439a023b3a08033069841220f35609c","sha256":"a74ff19520ca3b9427f1d4e577604df28015a9f0678cebd5a634b80aafc6abc1","sha512":"db390df431bc2bc8d36ed70a9035e9c572589e61dd38bbd70efb1ca6b624d2adda50d3aa2e8619d8255fba909ddec71462243146437da5db936480fb808966f2","ssdeep":"3072:h6B9344fB24uVzbBQhQVXqJ8gRNx6WVI0XoLDZkgnDFIkV:h6P344fB24mb1XqJZ3n3XonZBnFV","tlshash":"f3c312c62cb975bbdbeab5d7421e573d410221b9c69e350ba42cf4e5c02fb98071be08","first_seen":"2026-03-04T09:22:28.658146Z","last_seen":"2026-04-29T23:30:42.203311Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1300,"timings":{"blocked":470,"dns":18,"connect":152,"send":0,"wait":189,"receive":309,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/c93f319045a9cc7092c871bc910af3e7.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/c93f319045a9cc7092c871bc910af3e7.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GRIbWQmEfM8E0wXC6iqGGAFSlfbFjwcblUAk9skKxQCXfgG9MVD0X5Zp9Bn34xzyRC1unR63rb4=\r\nx-amz-request-id: 5B391AKJE4A16081\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:10:58 GMT\r\nETag: \"da89c12bcbe748efd0303d8f6b8449ca\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 19258\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da89c12bcbe748efd0303d8f6b8449ca","sha1":"2530680e04a256348e5303172b661a88edc86ea5","sha256":"3c6d6f09fa26eaf9b0f5d3aae44ee1d98e76c6a7f3328c73659c374c58fbd40c","sha512":"58182e7b20ce00432560aa9d01017a29b295684e5eec3f9e88984ef6d0241c962a677a7f4842a5a7f365c5feb3f64a90ea41e299df318fbbef3f19b612be36c7","ssdeep":"384:xLu2VeOLOkKXw/4KqBxtfL8Wc7vxpgaDe6wgrQKyS1Vz+H967Ze+Oy:s2wkOkSw/4KkfL8Wc7ZpFegcKye+AN","tlshash":"9682d0f189dfa1bdf0eca5f8c244b72eb548610eac222a84275cdfd8f064de21879108","first_seen":"2025-11-30T16:25:47.869687Z","last_seen":"2026-04-29T23:30:42.111764Z","times_seen":12,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":301,"dns":5,"connect":156,"send":0,"wait":223,"receive":1,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/5b0038aee0a518656a24f22818f44f55.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/5b0038aee0a518656a24f22818f44f55.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QMSS0r9yVY38S963TaM539vOaM6ixaYB5x45G4qCw0IQjuHL1WXLqbmamtB5xIVnvIofkBlwd72lkYRNKyijLA9BE0uTlZPV\r\nx-amz-request-id: 5B39Y4CM1W8E6ND1\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:08:00 GMT\r\nETag: \"aa14b8605b907d6d4221583fe652ea73\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 65457\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"aa14b8605b907d6d4221583fe652ea73","sha1":"63d9844c347f9187d39969e35cd697fe7d735ca9","sha256":"eaecf5ec4b6736ffe4679678aca4a2ff21b0be8b50a320e2274118a40b48370b","sha512":"6d6953a75fbead3ee9b7acb7a1549bf5a05326ad88aa78d7b7f67f729fbbf23ebe6b98355fe23dbb42689addb0d997fe1ba64df071de6a94262b3dea680f5528","ssdeep":"1536:PxszKPILYk8sEK158UZgxTwafhdItESuah:aKIpEk58NJfhGtEA","tlshash":"c653026618978aed6dc0c1abcbfdf2592424b31b6f732e4b0f676641e79c0690c943d8","first_seen":"2026-03-04T09:22:28.769903Z","last_seen":"2026-04-29T23:30:42.105663Z","times_seen":10,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":1,"connect":93,"send":0,"wait":131,"receive":94,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/index-Ccu6oc9r.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:45.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/index-Ccu6oc9r.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/group.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:21 GMT\r\netag: W/\"69b6c9c4-66064\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WwjTcIrcQibmXPCi0zpdEtKc-xUUIdEX20y5HdYAukqLYU64oVaWXQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":417892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30427)","md5":"632e87ff8508810c894fdc27d1b08616","sha1":"2d4ee9ac352575e3dca55fcc770a14a556d96287","sha256":"8d13ebab7d649e691c78c2b7881509be46e5365dce325b01d0935c2f1002b470","sha512":"32fab71900348278f6d9b07491da13918fbded075a7a1efa8c90967b21ef0ff0dc2d309f7a6edf01bfb084a33c16c8e8569445ec0746b6267ece87c8e4d27243","ssdeep":"12288:gaGdXbL8Dgb2wkbAtASr4jZ01qnYa+P+JRZiSG2Hn2GuAsbXPo3UZH7qU:gaGtbL8Dgb2wttASr4t0EYa+P+JRZiSA","tlshash":"87946d943281b43243f625e2607b1113b3391a15740ad0c8f16d9dea3e7ad8aa7b7f7d","first_seen":"2026-03-17T17:43:41.196008Z","last_seen":"2026-04-29T23:30:42.043106Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/mall/report/queryPayReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /mall/report/queryPayReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: f-XDTz2ErEc95S4Age4aULsC1g5kQz_XbI_olIZMCrT9D51Un04vxw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/deposit-off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/deposit-off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 830\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-33e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6bt4TXSIhzGMvHD-BPRe5W2dVCVZkyHOA66mPs1YItIe5-JirsPonw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 39, 8-bit colormap, non-interlaced","md5":"456ba00dac8cc233699bab3ef9a8e6f9","sha1":"b7d86c301903b601da31d205c32c9b9eb4485dd7","sha256":"6042e620f9e449282469eade94a78b8b2a6cc89645a0a68155e4139812f92f88","sha512":"1e1adaee1bfe44e8e6171bb0e5098372cd353eea1a1c34e93f2770e623dbb782db0e36a060107d003adc1f876ad91cf22050ba409184456a9a003973671dc995","ssdeep":"","tlshash":"dc0112fd04e02d1c4a36e3b3e4b205eaebdb5431d3f59818651324f649871402349f5e","first_seen":"2025-11-30T16:25:47.775093Z","last_seen":"2026-04-29T23:30:42.135179Z","times_seen":12,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120258.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120258.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dPvI6NIZhOXVHMH9gQJK13r13Rzr5Tl5lPnItGYwPSS96US7q7OkFIUG0lG8DckEfGKLZ+hr4QCM5A1o0xgnNBpse7wLc2sV\r\nx-amz-request-id: ND759TTB4RQXAC1D\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:56 GMT\r\nETag: \"288af7d5e7940db0368d96bdd73f6b1d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 37766\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":37766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x400, components 3","md5":"288af7d5e7940db0368d96bdd73f6b1d","sha1":"4db0fc2a4d11c853adb5c669db1befc0e787f253","sha256":"9db1c68d7b98bfef7ab42f3123c74e95bf1924429aa5dfdd1a3662583082f586","sha512":"343b70b31abf58441c84fd39b3dfc52ea2752175519c84028e8f0fac6010d98e4785b63abee9cc3f51225817fa711323e9127e8a8636f87e18a8cf033ba2a9e1","ssdeep":"768:KdNnuNLXrqOsQkSvwyYyIiRJ8/hgrQk6Vzy1DJZ3Uv:KdNuNzhsHGwyYyIif8/hJ9VO1vEv","tlshash":"4203f10431d0ebf1f18f8119b2daf271bf7f9041885b66ea740aa061f5ce6e341a5e53","first_seen":"2026-03-28T21:45:10.677071Z","last_seen":"2026-04-29T23:30:42.189434Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":831,"dns":0,"connect":0,"send":0,"wait":173,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/9.C0ihX22C.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/9.C0ihX22C.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-b8f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: UzJ7tG0AIBNCtXSvYKO3VvJcPz73sjCB29i3DVkR38jxB-HHjUBQ8Q==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2958)","md5":"a5bed91311938e6aad27f544c0529b92","sha1":"ee7c1997797a857fc92bfc034c67b47c1cd9f2fd","sha256":"8d0cce6e2cf0db70a60a449a2169b1321dfa274276155a17039f573289486ec3","sha512":"a27c91e129f72f4a990966b3146177c5b196de385014aac39acae3126e9003cd608cb92bad6e38c0b1c1eacb654d96a868e28f154f90a4bfe103541d05614e0d","ssdeep":"","tlshash":"4e513b73992252600a67b8e0607f4cb89eefb1319e795163f17dd4d8e59702087af270","first_seen":"2025-11-30T16:25:47.843793Z","last_seen":"2026-04-29T23:30:42.021571Z","times_seen":15,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/8.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/8.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 11094\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-2b56\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: j-EGadzk_Hbsuvj0C0PN1mtPzkGMWwEzoJhuEHndD9NtiPTMQUaJZw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11094,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"78f7e7b8685bc98d8a935754d05abe07","sha1":"9e94e6f3eb3f05ec5a223cdac43580ef0dc0640e","sha256":"81beabb9e8141fc7ca1bf557e1f1f2356313e100d4eabc4cae691cd0c403c8c6","sha512":"8406743149d9abd3710f6e712dce695001e8ed9601500219fcf402b943f563e1ace9c9354650e5bb79119a71ab66646e5c10b35f9ef668c3ddd4de0b3dd11743","ssdeep":"192:N1ND2SmoDo5uw1iDNyNStJUDMyRFPxfZ0SF6GdOYwVhodas7fkW613A/Ou4k:L4toDUuwYNqrMgBlRVwVqzfSFbxk","tlshash":"dc32cfd2f4d8f5b4762c7095d53bda2ca552aa3080abacad60c3dfcc5309852270c3bd","first_seen":"2024-10-13T06:10:01.683739Z","last_seen":"2026-06-05T18:00:44.943246Z","times_seen":41,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/ceb6593fc083d0bed4c1f380dce987af.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/ceb6593fc083d0bed4c1f380dce987af.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cfQg3pCrg1RMu+4ZRBLa7hkgA4LrCYkI0uPNt0qT5ODA4lwYCq8GHlEJcJEYdTSiHo/nZopBweo=\r\nx-amz-request-id: 5B331WNV3DPM25AB\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:02 GMT\r\nETag: \"bd30acd6a052745495133e4e4f2b2225\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 12530\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd30acd6a052745495133e4e4f2b2225","sha1":"8d949a5ddf1f4755da67aa47efcdddbb59e2ad2c","sha256":"80f67ba407f984fb83ecca6774ea3de26a15378fbbdd3332a5e488695890e130","sha512":"3d49df05e23d41c2fa18b2f3d2d5b01cd6391cb995c30113dd3362082ba284e734ac47f5701dd263be01dcc243617e2fea5538e74ff66c9f53a23139e085df16","ssdeep":"192:7ebr6DTu9cKLQMNjChjbax1uZVYKIVNLIP8SlTnO6PGWfWFpu0ZUIVfIctwhdbqy:zq9cct6jwIOLVNL4lTnOGGWu60ZT1y","tlshash":"4e42c05807dc5bf0aec486fc550c681232fd484bdf2983253847ac69a5ce8cc8f8f9a8","first_seen":"2025-11-30T16:25:47.855533Z","last_seen":"2026-04-29T23:30:42.146548Z","times_seen":12,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/c7c537e669c211c5766d7f1f3e04cd71.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/c7c537e669c211c5766d7f1f3e04cd71.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UyIwxz2EH/aQARVbtiq+skri4JPnNxOpSJEazS37/0viuCYryQNN/W4Z1w7V2bdWEVFzHuQVSe+o9Q7kVxArQju8QccHVL2M\r\nx-amz-request-id: 5B3BHRCWWEMQEKNE\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:02:15 GMT\r\nETag: \"24f655bc42ebf33aa0c47882c7b08f5d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 10146\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"24f655bc42ebf33aa0c47882c7b08f5d","sha1":"2d54d010f35efc4b64868062a8b28524edd05b2c","sha256":"fd8525c3f5305cb5279c1e68e339b052bf363a0a95c97e33c7c8461ad4b4cf69","sha512":"8b3c8dd69f9162f3ec0f47166889bb4f2d7743da233b283c857fe921b1af02afa8e60bd414e052f1d122b728a9824d4fa63fd997851e96ec84c2b6a4f28cc320","ssdeep":"192:1VqQymwXW3oIMuCOp0QP/8328esyf2M1i+fMeeyCpD4YUF0HH2WWu:15wXIMuCOVU328Byf2WIpxlHxWu","tlshash":"3322be469b5d4951c7013b7ba5c6b831e165201bffbde0d941842328bff98e7a94cec8","first_seen":"2026-03-04T09:22:28.742685Z","last_seen":"2026-04-29T23:30:42.148066Z","times_seen":10,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/home.gGo2YeXb.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/home.gGo2YeXb.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 491\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-1eb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0VKV0JGoRMFjuR3gv-Ly--LgpLQ4_xK5NkyKwFalTbTtYrUVCQgh4Q==\r\nage: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":491,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"7878665219ee2a70184a02db0afcfc8d","sha1":"de123facc2ddc76de0605bccddeece372c6f1adb","sha256":"250e109a00bff8dde45a8c4f5a8908741c912d280533fd3f01c6ae61af6517da","sha512":"59c757fffab0db51151d11383067c5fc2725d18609c8d3a5efcc5a16fc483cfcf69f589c4d1abfc6f5bc1d04f7e3293a181d61f23649b795227dc7b77c712b7b","ssdeep":"","tlshash":"1af02e6db4dcc97332577b8f9218eb403ea4e3ba503449dc4c8c27209b66cec702995c","first_seen":"2026-03-17T17:43:41.224418Z","last_seen":"2026-04-29T23:30:42.045355Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/turntable.DrB9UqG6.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/turntable.DrB9UqG6.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 362\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: \"69b6c9c4-16a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 2GqVgiPnHHC0EU8IGK642rF4l_oi781DN45j-rD6-xhZ87ISY9DvNA==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":362,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (361)","md5":"a5029de6c0b9f63e6fdcf5fca6639376","sha1":"57c3bc5950936037df29efd5f8c14f08dcc7bbcd","sha256":"f18a1b59ea2aa0ba8de5971b595a1a662d32788e12c1954041662ba9da6865a0","sha512":"ba22e56c9f32a1ff0bec5357b86aa748a0ea0fd5fda2fbe481f613b375e9e33e3f570393a7375d8b7a2f866c8a2821ae3d0f3c78d652e8f7d1546e66b71490bd","ssdeep":"","tlshash":"b8e0d8bc649ca9b3730bd10f674ce7105868e26a692406f414c85b60ea114d4f40dd08","first_seen":"2026-03-17T17:43:41.162046Z","last_seen":"2026-04-29T23:30:42.150652Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useBonusStore.C-NW0A7r.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useBonusStore.C-NW0A7r.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-fb9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Q2fzuVwjUJ4kTbk1Wcz3bSt_yeJK1-rjhS8ZML8zVwPh_-tl_-bS9g==\r\nage: 85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4025,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4024)","md5":"74fbba8594c321c89e3d33296df25d3b","sha1":"5e387067ae2d464a0829839ac985876407cc4f24","sha256":"12b138b90cc3747288102269a2491bed62b3ba3898b47d833038dda922cf71ca","sha512":"eedfbb411e827629c51b4d1252312bd5b2bbc5436479b76c8c1a3860aa47eafbcc2f70d81d90656688be84207a9356f1ca4f7a5ef9bb3f2c0b7f9c422001853b","ssdeep":"","tlshash":"758141ee37ca08734469ee88a85d1a57c778775a50404169aecea718bf0cc57f8b2f21","first_seen":"2026-03-17T17:43:41.262434Z","last_seen":"2026-04-29T23:30:42.031996Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getGameList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/getGameList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zOle3HogFusNN58l4S3w8pv6OO7plZi2hEBnZdV79V6o9wPYanSg9Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getFiveThreeZeroInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/getFiveThreeZeroInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UWiwr_5slX8KPxJdlnJ4l2ZfipxhSTUaSn7Svp4h-4LCES1hQjp_hw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/3760e77f442e576d1e0dd7d48005d369.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/3760e77f442e576d1e0dd7d48005d369.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BTbuTHCpJpBt89OKjWcEDw3jDSSoUlt00Se8QDY6oHSFLhgFMvd5SC5sbKN0kLBD0KlUviLIY6M=\r\nx-amz-request-id: 5B3F0VMMD5YXFVFK\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:05 GMT\r\nETag: \"f04a8209c62513273d7e374c1eb40926\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 16486\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f04a8209c62513273d7e374c1eb40926","sha1":"d62d9b81f896c4aa0c03faa91f691d72b70fbfb6","sha256":"593bc88f80f9ce86c161ca1da6a1cc8fe6544d3ffdb36a22eeb5bdd4b4877e74","sha512":"ab400e27168ac2c397e4a403865b5f7b008c698c643e1b27e2e555ee24412d065c756d297818a2a714446d3fcf692d7feb99bdcc38f81f95d98b8be0654a2e25","ssdeep":"384:sFVjTH1OQF2O3ygDVVs49olTNg+fFHfGE6IAkiiZ5bPL/D:sFVjjZH3zY49oBNffROEXAvcJD","tlshash":"9872c0fc4657f5752f8626fd2014d304e1e2452a76414bab8d4e2efc15efc2d28fa1a4","first_seen":"2025-11-30T16:25:47.862856Z","last_seen":"2026-04-29T23:30:42.028328Z","times_seen":11,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":302,"dns":1,"connect":156,"send":0,"wait":175,"receive":1,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/8892c0b6ad97055c584573b0bcfb35a8.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/8892c0b6ad97055c584573b0bcfb35a8.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wuyUU+7SSnqjQ9/b79El2ep4sZ8YMN2vLrMn0lk8voUbXPS4otHeRIfU5c0PP6npZsnyuu+/7oMc23iZvka7nWu8/ptmZD/m\r\nx-amz-request-id: 5B34ZFEKD5FTJRH4\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:05:42 GMT\r\nETag: \"2ca9d13f493a2c6eb0efd6160386a8f3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 10734\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"2ca9d13f493a2c6eb0efd6160386a8f3","sha1":"3cbf68172ef6fecb2c3d941b0d954d7c5c8a5678","sha256":"d666475bc9049c20d3917c5b150a6a1a816775cc54b0fa7b7cd78ff2bd5d1a32","sha512":"ddb9ff5890d3d40b3b228b6e635f6eebf164b3fc1ab44d07011fcdc623b6bfe62ebdeacf6cec9790b554eb84f17a5b3281f54d711a9da715f77f2b67908a5f8f","ssdeep":"192:jVvdRXnSfJ7sBbZVokVLidVfdUzXusfsmLOBJCgtwiBaH:jtdRXSfCFZoDfdrAsqwCgCi+","tlshash":"fd22bfd2db862e89ee44583068a5fb6c2f2760497a01c4aec4d09e166fe51a27e4d4c9","first_seen":"2026-03-04T09:22:28.687418Z","last_seen":"2026-04-29T23:30:42.127338Z","times_seen":10,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":363,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/message/getHallMailPot","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /message/getHallMailPot HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: _hY5hbeHniE55wo3X6J2whPBJNlIClhXLZyIT4AvoQykRNCItXok1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/f2d8a50f0ac44c0fe33ddc1428e8d197.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/f2d8a50f0ac44c0fe33ddc1428e8d197.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tzE+ArnGSogW55LwrtTPAbLRq48oCLBTAfULuGr8IHYW1UL/4brX9rIwaxyySf9YgWaT3Q3MAOk=\r\nx-amz-request-id: 5B3F7T61J3M1HB2K\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Mon, 19 Jan 2026 03:12:26 GMT\r\nETag: \"6f9b60f462cbc6f1351f015f98535fe0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 24615\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24615,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6f9b60f462cbc6f1351f015f98535fe0","sha1":"07a857ce036a67c36e2b55cfa3c9341cfc434ddf","sha256":"074dd11c7d06bc4ff4e2967b406921f5ae2364de6c2f13b24fd564d42713c86d","sha512":"ae6816b324f3a6b267e90229921e0abad9bd3cc8beeadadb6d92bfdb8e4916eb6943772c86a6ad98cd8362898e4806535eec025dd065be7815d5cfe3e7e93aa6","ssdeep":"768:qYyAkfYwNswImYaagKk7y/JJrYHnxTH1Fo1K:qVwL47uonyQ","tlshash":"f3b2d098a719a653ec21fc34b9f836cd41a5f991abf338507701eb2b090c9c5d18e39a","first_seen":"2026-03-04T09:22:28.673091Z","last_seen":"2026-04-29T23:30:42.139406Z","times_seen":11,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":299,"dns":2,"connect":157,"send":0,"wait":182,"receive":154,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/uni-app.es.DArlo3Hh.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/uni-app.es.DArlo3Hh.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 243\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:20 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-f3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: T8libLQor1Lc37dQL2NCQTMLwa2SNYGe7-xIzg-jdWJ3ZMR0lcpz1g==\r\nage: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":243,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e50699aebab8da9ffdd0dbd0bb616c19","sha1":"97bbb4d0548b3a978f6d94e294d36db9580d5dad","sha256":"30670f50011b8bd30d6ffa8d440df332734b559891248a82fc0dc32e4f06df08","sha512":"3b0be6f77e1f08eab276200ce354a68116dd7020a8ac49adf26df4882ceb63827deb994fcc464a53b17f86e0c1abdbcbe5b42cd746e4e50f2ff084681392ebd0","ssdeep":"","tlshash":"32d0a79ea459e7ba281b848d3038190f8158b4f62e7886c0928b4761e670459d13c511","first_seen":"2026-03-17T17:43:41.184381Z","last_seen":"2026-04-29T23:30:42.110809Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: t8Yo1ezCTpcIIVHZCpHMKetBGg5SgC7-QLCJk94M8DNQeEqqiYg_aA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/6.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/6.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3072\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-c00\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kwwGmB9DXZ2uLtvGfyk33YDVVfvQADKZibTl66nI0XhwwOgy2A-MZQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3072,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"603660c62b2682d3d62efa86ad882502","sha1":"794fc6b1599113bd27686f927f35510b29566b90","sha256":"9aa82a07c74cb88ab92fc9ab48122ae990c8f2b933b2e27e24673fe3ae318eef","sha512":"7e3eae579dbfafb84bbbcf38389438f67f87a6ef0c5c6da068afeb14e3b568028f39bd9881f0941de30eab955192ebadb5dad5dbc24a7c26aca6a89ed56dbc05","ssdeep":"","tlshash":"80515c9677cb5acc5b3141318a7e387e1e1b479e963d0c2a327a74c05628dc952001e5","first_seen":"2025-03-17T17:56:16.8228Z","last_seen":"2026-04-29T23:30:42.137382Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/37342bcce09465ee98404d5a7e934bb3.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/37342bcce09465ee98404d5a7e934bb3.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TWWi3cmEN2F1Y95gjGLrL5CsliGZPuZoW0OJLgfjnx842oUS88RPZfXU+OVhSl3ktrvWxSU5qSKb8Ksg5MhdaRUUgu4QDVQf\r\nx-amz-request-id: ND7DRSGDTKZWCB4N\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 20:58:05 GMT\r\nETag: \"b212700582933e0d80b1bcaf277d973c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 71518\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x400, components 3","md5":"b212700582933e0d80b1bcaf277d973c","sha1":"85e039916279c5403d9b458895905d01a8a6ec8d","sha256":"84be2903563560cf1902121b994954220e0877b0618c0d534e541ccf33d05403","sha512":"58af905800689e05b395fb0ffa7e2715d32bd7fb722c700915c8bdc419fd2401ba54083da7f791b86acca5fd8e560ec29badbfd9055bdf74752fd2864e728f33","ssdeep":"1536:R3nrNN7TY31tGlHFYt18FQsxsIM5GLrXSmM5eo1LEtyhX9:R3nrYlMIt26sGIMQSmMAUEta","tlshash":"f963f11495740c437c4533289c6edd5a0701a73e2a07a3c7908eade6b7f8a3d36a91fb","first_seen":"2026-03-28T21:45:10.839498Z","last_seen":"2026-04-29T23:30:42.141478Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":1181,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/2.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/2.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16584\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-40c8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: nyUkXBdtyRb6vV4xz1kLbxHD4V3_KUSCfLxjsi41aDFok8hgNm9OgA==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 168, 8-bit colormap, non-interlaced","md5":"e06504b2d7c2f758b73edcf7d8e8523c","sha1":"fb7c3cd2012046b74e2ede9b080eb1b29db1b2a6","sha256":"3f308780ff1c8a806bce71fb067f03a59c581f1294fe04c11ed6a2f91032d709","sha512":"acf7652e22b1abf3f002849de189cd19080de0939423ae50944ec55b0b555fbdef2b0b0cbbce6f149bd644f17a50a69f8a356220386d117e1e1ae2d77209986d","ssdeep":"384:ibrt8ntiaH8gTObsw/zXahEBff+PDYpNpiSS2Qt4rZ/HjlwswT0h9p:et8njTOwqXHpf/Dgt85wsj9p","tlshash":"b272cfb6db097413301d76b284caf11a4e61c2a180df7e768716754a6766130987f3fd","first_seen":"2025-01-28T05:56:46.736394Z","last_seen":"2026-07-16T06:24:39.532867Z","times_seen":72,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/09bd50b089286fcc8731ab1a0376b2a5.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/09bd50b089286fcc8731ab1a0376b2a5.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TVEP2pbqJrrTyoi1YWGTkJcmd3puCo2fUY9h4V+ViDRFoxUFn85bu2koRwxb/LAW1pwgHkiQNpv9ERnDAH72OA9QJgKRXTis\r\nx-amz-request-id: ND76RDY4G3SVY4A8\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:17:48 GMT\r\nETag: \"a1b4f8edb878ac04aec4f82286a8799c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 12947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12947,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"a1b4f8edb878ac04aec4f82286a8799c","sha1":"d58c6715c6de46d0fea423af16dad017c7d5ae98","sha256":"a8e0edf0dd91c78d40b7b873fd09c07d3050ab8290b46f5304b5666ba03e165e","sha512":"509bf4ca8a422ed52115e69663bff7b83ca6c8f171d77c007053f53abbee0c7e8b5534d76ec8f694f214c60b9d50d76c18032f7f03a94ee4ee645692d94ae975","ssdeep":"384:hYNg7f622/V53pXQfiUC3EH9u1Xuuej7jIk:hYyrbk5ZXWJuePjIk","tlshash":"2b42c0b6d9a6e7f7d739c73828e2b6a04b817736db60ad6500628e38010d3cd695f0c4","first_seen":"2026-03-04T09:22:28.685042Z","last_seen":"2026-04-29T23:30:42.131531Z","times_seen":10,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:49 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3-z04sJkjteMs1XHJGVxCVoPVelu_qt8sTYO8vLrTDSQrXMbQ7VYhg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/WithdrawUnlock.BjgYUAU5.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/WithdrawUnlock.BjgYUAU5.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-851\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: WZOLZfj8zP4TiHhZqPPUeZ4810Q3USKUEkt-beevygL_Dle3ZXrUlg==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2129,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2113)","md5":"dcb961b2d194d3f8cb09809133b5329c","sha1":"80f5bd62c0c1f4554a2634e9b604a42289b7baab","sha256":"bf018a5f42b646d726d53a1bc2d268628e5c40c7d2086eac144ab412fc447f41","sha512":"7796066b8dee99665fdd6f4930e1553e25eb0b36146de1b9c42c1ef32f62f5254e7a9222d40e9a3e8515b5f33772c54777d3589374767bee0175385cc3101704","ssdeep":"","tlshash":"ae41714eb60bc23c8a61baac56954c14316d4fe9e174985230bded804fe2cb8a71db38","first_seen":"2026-03-17T17:43:41.151873Z","last_seen":"2026-04-29T23:30:42.108514Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/97bbfef5c4c93b8ad276d6db27b66984.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/97bbfef5c4c93b8ad276d6db27b66984.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7DtEh1kxOFpcpEbK15opMHeEbUxleFfMyOGZDkIY0TG0sQSxoG8wRriBYhMOEL7wXmmOtUaJnyXwykZPsLS4xWV7eueV0J39\r\nx-amz-request-id: 5B3C61WKB70NJ5NA\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:04:52 GMT\r\nETag: \"502216fd2a56f8d7c631960ab2f4dd2c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 73907\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":73907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"502216fd2a56f8d7c631960ab2f4dd2c","sha1":"3a574e37d954e6f2b0e5da086095b6d636a674ef","sha256":"d12e8b476dd34b9e1be7d3948eec30ba808950350e92a9a2146bda17008e6175","sha512":"1969d2f39d46a493577ff1de8bde4904b96fb7ac3e1b02ea58bda3dea3ee59d3365e7cb931492ed5dab9a45446a32420075220e79a434ec58a29951965fb42f4","ssdeep":"1536:kKt0PQTg5E0ymqKdfegw14SrXaKP3oEPilMKatOB:xqsgQmqKrw1BXa0ZPiC1K","tlshash":"2b730243b878aae9ef6bd671f431d1392088d7a7d3b466651f7c44ed21122530fac858","first_seen":"2026-03-04T09:22:28.671016Z","last_seen":"2026-04-29T23:30:42.091026Z","times_seen":10,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":111,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/ecf69851272d5efa27ef98e68662a17f.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/ecf69851272d5efa27ef98e68662a17f.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SbVXh/qu976sHU5qzTOtnh4lo4/ODO6PPD92Wj7vICQy0oKL2eIt/AqybMyVp+CThbmw9ukZqoxYuSoq7Do/pL/bWzzVYf83\r\nx-amz-request-id: 5B3CMK86YP6M7JE4\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:10:45 GMT\r\nETag: \"46f1ce02173eff4a98e44172de64686d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 19264\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":19264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"46f1ce02173eff4a98e44172de64686d","sha1":"696f2c2efed3d0f4411bb741d8b2bd0355bbb619","sha256":"823325442846c7afb0d66204965ae1dc27be81c98725275528ce563008144ea6","sha512":"431f595fb55b715c480a6be59554d4b71a0a3dc5d672d2dcd688d83ea970fed22eb8df4cc7c67693639cd2144b76ed38bb01e7b999a33517bdac8ea0877df169","ssdeep":"384:coNLVrkJnurfFx1XTlockYhpT9ea91Njr609q71obrNYgJ2+ra:cSXdnGNKK8P6iqxobrlJhra","tlshash":"fe82d03b92fbf4013550beae93f910b9983235c0c0993933f0e91919bdda61d53a2687","first_seen":"2025-11-30T16:25:47.887373Z","last_seen":"2026-06-04T07:47:08.310546Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":497,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":504},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/WithdrawUnlock-HTPb7dUQ.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/WithdrawUnlock-HTPb7dUQ.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-dc1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0JDysvUFUsqKEijLggzv9dImOzNbP181HIIVdD8H5rBnwJCVuP987g==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3521,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3520)","md5":"e2735f5b184be03b38d2ea39bc7a10aa","sha1":"e3e3ed9a9851e260cdd58b489401694902cc5407","sha256":"bc9c088f72e2d3a4aa45f9f4bfb3c67b56a3df5bdbb3cb6b9c912768e6afd6d5","sha512":"63acdc371efa5549b5c22f51d9dbfa3e71ff1d8fdefa224c6fce641ea67c711ee3a60e76a3a385daf1bda977eff18f5bf7bba59c6aca4c49db9dca1d75035a5f","ssdeep":"","tlshash":"2571ae25620d2108a47bf0135de1cefd611dd283e22393cd759b7aaa89d768b7f702d8","first_seen":"2025-11-30T16:25:47.863843Z","last_seen":"2026-04-29T23:30:42.156264Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useMailStore.Is4DhXSq.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useMailStore.Is4DhXSq.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-b43\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: cXZEaVNdlrACziXePqtTAN-05k0HAShO2n-1BDE-OHsbRV8DQnOvlA==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2883,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2882)","md5":"b3148f0f12baa3c9750842324d0690e7","sha1":"5fe00729faebbc87c6371c81ffe604fadc4ec0b0","sha256":"fcc61f5cb97669e569d4c37238f2f119392f5978ad6148584feb2c6714be756e","sha512":"cdd040b88b849d6f8115ef23a206a8b3e847d9e74828f5ff915617b9c4cb70521fe378b6a319c15ce3c96763b9caa310c146b1e0a5c98e94a7c4fa699b4f7441","ssdeep":"","tlshash":"0251239cd1cb72764165e68a70137752826cf2079c40917a7f9df7817f18e87b486e31","first_seen":"2026-03-17T17:43:41.208347Z","last_seen":"2026-04-29T23:30:42.036301Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/wheel.Cl6SL9xi.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/wheel.Cl6SL9xi.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 311\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-137\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: du_bckO8qvBvH96B28g25c2bp9ZSLNnO25vea9G3jNuSnuLMYp-tPA==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":311,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (310)","md5":"e5fffb5e843e01d6eabf7451bd356b20","sha1":"a039ca9b9f615eae25cb7eaba731c5e88508e6cf","sha256":"817aa6541b24364a8b52fb1f6a10390472b2001263b2b3af70bf2600a32fb178","sha512":"632733306f9511caed93903b1bde2d9aa54af93955b957f2f9f206aad370b5cf42899bb7a9fdbfbc72f305425bca520be3fad4de2ed8889c895a0ac07488cd9b","ssdeep":"","tlshash":"2ae086cdbcadcdf3122b4e4a9e0cd210e4b0e3f9512081c868c93315da368c57c1d404","first_seen":"2026-03-17T17:43:41.201735Z","last_seen":"2026-04-29T23:30:42.082376Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getFiveThreeZeroInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/getFiveThreeZeroInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"bd88166b55c0fd6756dfc852d1be976a\",\"uid\":46001926,\"time\":1776958488008,\"rand_str\":\"1f0e4dc6744ee81778114794b8a094f7\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ncontent-encoding: gzip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin, Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ZMPCWz3vBgkd8sx_Nb5UxsXR4Z4WLHiAKnUwtrljQYRY2lGdLdbLTw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4a63f4293e92959163d834743d243d55","sha1":"b20615624d2e409b6b08f094e794d42d8813b7e7","sha256":"f62a0ebb1b16ccc6d1f28fd1065d67dbf7d8e32dff5980df23465837a5b0f83f","sha512":"77a91829bfc7cca4be075bb95f6f999a80b396d26b4862b77b80470f841f686000457c75f7ad13efe358dcdc000be7f9b99438203b81c819f1ae0bf1405607d6","ssdeep":"","tlshash":"0331ca58541c0fecff5098c29883360647ee1a472b201e9584e6d6217defbbe17b1e23","first_seen":"2025-11-30T16:25:47.859709Z","last_seen":"2026-06-17T23:31:32.761054Z","times_seen":15,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/00ae644ebca8b29e2f0f077b65a70c99.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/00ae644ebca8b29e2f0f077b65a70c99.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HaQrKvny3KDT+SuPvkuKkzs1+TFJ3HrnFDjqDrGFFF8m/NfBZR0OqdwD0xx1ikJQb2Qy1GqFgbAjxQaC5IUSuvLW+fHbml4h\r\nx-amz-request-id: ND7F66NNJ0MY1ETZ\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:10:32 GMT\r\nETag: \"a38fae175e87068ce494f741b8e2dbcc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 16522\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a38fae175e87068ce494f741b8e2dbcc","sha1":"464e7d7d5ea6c20b14a1d7e8e82877ae917f81c7","sha256":"5d61d4d2207c5c9dd74dd054c8db117c9d9e50cf7c345dabc8f4d161f6e9d090","sha512":"4cd63964b0025b8ad5767f5dabe6c3e96a3811bfbc1cd7ce010c6e363cd7b0bec2c1ac7c07ab75eaf5b1209a49ad9e7efd10ceb5d66ecf99b246697990d93e20","ssdeep":"384:VVhPkjq1LhFA2hfTpxkSCjdzo3mM4b4he2zlcYw3h:RPkiLrDTQStWtb2Nb","tlshash":"3572c07e38572f0ac54c54397baf11d8068e19257113abf4dbd92798a021ef4c623ab6","first_seen":"2026-03-04T09:22:28.6758Z","last_seen":"2026-06-17T23:31:32.892943Z","times_seen":13,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":773,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120047.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120047.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0DpBH449vKc6FxFLVLOq1as+ATPpPpdUQhzlQWW2wgxoVWre2HbKuTeDJ2O78fW+umWBIjLZUcw=\r\nx-amz-request-id: ND7CSHWA0P0KJDC9\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:31 GMT\r\nETag: \"dab8dba4d42c1bc15df79c1b9c71c38c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 56415\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"dab8dba4d42c1bc15df79c1b9c71c38c","sha1":"fead5fca3a303f0454a20ec5fe5767d2ee3788cc","sha256":"2d3dcc4a3b11f5284155e3b957b161ee935fc6f7d3cee0cd967a6794e26d45c7","sha512":"c5181c869df44e8dd3c61913dd6b5c2eea1d5123fc04c2e625e0ce5fb2252e69d76f29af06e578c03b98407c7685edbd8b4291ce45d4a5708975d89a52825ed9","ssdeep":"1536:xOj6WvxaIOj6WvxaqmwlniHW8Q0CbY0e8rGX9JXs:xK64K6RN28jE49hs","tlshash":"7743d07dfac0acc0f9f506bea880db7606104cb8d597152df4ed3d03bba9541ed1aa4a","first_seen":"2026-03-28T21:45:10.809575Z","last_seen":"2026-04-29T23:30:42.144877Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":1009,"dns":0,"connect":0,"send":0,"wait":172,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/mall/report/queryPayReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /mall/report/queryPayReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"c95fc99c6319917221c2da26f129c5e2\",\"uid\":46001926,\"time\":1776958488015,\"rand_str\":\"c98f2ffa9546bf17d06e0e84e7d8cfb3\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 57\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: it82IN3x5BeuLp6RqD92AkToQtuMY7pWHfGkIADVbD8rgW4EZ0KY_Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"665d55ad4ffc2858c05a080bd6db5b71","sha1":"2e90ea36321cff69b08347b6164fc5210aed885f","sha256":"0e6fc91d126224b0f1ef640a7205d042b601e8694302b48e154284e683dd2e74","sha512":"992b676e1b029a7c262fe19aa01fd4d0bd0a34f98762992078c3bbd49c1abed69da8bef533d5d90e1640b6c5e4ca7e6e36d5051b604f26968868b4f2e14daeb1","ssdeep":"","tlshash":"fe9002101a6c1c25174b829ba01d5984959d92484d9551654c8c971657499d52921974","first_seen":"2025-11-30T16:25:47.807198Z","last_seen":"2026-06-17T23:31:32.827086Z","times_seen":15,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getTemporaryData","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/getTemporaryData HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 41\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":41,"data":"{\"keys\":[\"ShareData\"],\"channel_id\":10023}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 57\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Bs9XsRA0OLD5RhG5XtaNWgpRFIKCxZoQc1gJmJBye2rEN_TxBaGdUg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b1dd1e9757eb5e12578bdab4173bfc5a","sha1":"9f577aa83fb5eb038cd2dd77d9353541c31cf456","sha256":"a6fbb48a61bc3c871d419f5169a034d8a7eda4b34dfd7db925573956e3bd9ed4","sha512":"e9027e18bfb202888c6ba8185ff09f65ee722275e2e36113ac300ee5fd49906a8b2c094b6b14b2474182e99aef29ccca768931d6305d711373f86372434adccf","ssdeep":"","tlshash":"1e9002011a68282517cb926aa01d9805459e11544d9560614d8ca657474d8943a35535","first_seen":"2025-11-30T16:25:47.778474Z","last_seen":"2026-06-17T23:31:32.911035Z","times_seen":15,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 225\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"sign\":\"2f685c283ceac770e4a68af980f339d9\",\"uid\":46001926,\"time\":1776958488513,\"rand_str\":\"e8e4c59fa7743554613d76787c9c927c\",\"lang\":\"en\",\"channelId\":10023,\"deviceId\":\"dfaae9cae854a313c03fe591012c2ac1\",\"os\":\"pc\",\"eventType\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 35\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3Qc0Nqyn_x1e5_7IX-2g30gexjGuBVolbx0WLQKCsdcOXjFA21h4Fg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e4a764f622d60195f6aec7a35a930ce","sha1":"61fbe38afd20fc9105df9ae196f46571faf79cf7","sha256":"769573b07ea424d002aac26a063596ab9647a18a680c921274c7e94580143a90","sha512":"162c48ebb8eb57782de7fdc8d6b2f611f44e05c75fc5b826fbae014e24daaa5a628dbad18a847b70ad330cbfadd6a44ca823199b080bd514a57f88b783f7ae6e","ssdeep":"","tlshash":"40800400153c1c5517034145300d1404405d10404c4110114c4c551c47044501131534","first_seen":"2024-08-19T16:58:49.888719Z","last_seen":"2026-07-05T14:49:46.751703Z","times_seen":31,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/btc-D9txKwGJ.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/btc-D9txKwGJ.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2648\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-a58\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: tm8TWlkFPXwpaJarIYJwTwsVLewZb7poX6RAxjgWDnbk9vQa9UNvTg==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 30, 8-bit/color RGBA, non-interlaced","md5":"54d052f2d68f30c2de7e3b467caf88f2","sha1":"18f4ca4272274fc7257b5e06875e00a37664df61","sha256":"f95e319c793fdc4b9c4ea6ca54a36af6f26711fda8cb9aec1aa1b2fad02d2164","sha512":"33a284472db9b9bbcdd7cb5e44147aa8da0bdccb89ade6c6f802264bedb9351dbec12f86c8f67b9386a14fa401cce2877c192ee9a6f3ea4d399120f5ae890661","ssdeep":"","tlshash":"8b513bf520364867a7e2ca2dfa5d74b77eb529f4fa6440d4464310724236803db70da2","first_seen":"2025-11-30T16:25:47.771826Z","last_seen":"2026-06-17T23:31:32.818167Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/Home-Dr4fjUCe.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/Home-Dr4fjUCe.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-36c28\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: UOL8uKqtNScvnqguuRt9p32XSUWEYZqhkJ3bfbyeQBf4P7bPq1NYeg==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":224296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1cc16271a63b05875f8a2ea3cfcb08b6","sha1":"a461de6f3454c5cf582c1d94234e265b55e201cc","sha256":"ce883b13b453167254ebdd3cd6b4db7b27cbc41323fc003be5958101d40531cf","sha512":"c5066ec38213a6535bf4698e7665690d5c8eeceb9ad2ba00c23119e24419e26a9e675d0dd9e813a718900c48a1237218727008082f920d56fc4ad21c4a101ba7","ssdeep":"768:97aZzJD7IsfIUDTwMfgXDu9rN83gSfGA/Wxi4E2IsKJvLMZjTpDdBgiZtrChrhSc:z/KH+PJ31K6MNqY7+zblO2D2+N6E","tlshash":"1c24639e3e0d2548b4bfc696e4b067d80120b7abc213519ee9537e62cdc72d33f15a98","first_seen":"2026-03-17T17:43:41.257708Z","last_seen":"2026-04-29T23:30:42.02991Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/wheel.Cl6SL9xi.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/wheel.Cl6SL9xi.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 311\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-137\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: KI9tBGkBsbPTzkF-cUV0mXxNCwV1P2n2HSGN8W5FXVH9TbDR5nVojQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":311,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (310)","md5":"e5fffb5e843e01d6eabf7451bd356b20","sha1":"a039ca9b9f615eae25cb7eaba731c5e88508e6cf","sha256":"817aa6541b24364a8b52fb1f6a10390472b2001263b2b3af70bf2600a32fb178","sha512":"632733306f9511caed93903b1bde2d9aa54af93955b957f2f9f206aad370b5cf42899bb7a9fdbfbc72f305425bca520be3fad4de2ed8889c895a0ac07488cd9b","ssdeep":"","tlshash":"2ae086cdbcadcdf3122b4e4a9e0cd210e4b0e3f9512081c868c93315da368c57c1d404","first_seen":"2026-03-17T17:43:41.201735Z","last_seen":"2026-04-29T23:30:42.082376Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/common/speaker.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/common/speaker.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 710\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-2c6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: stwuV6ZqMiG5opiYtezbQdUQcY7fxbuc49Pf2-S17nbNX_LG3OrXgQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 28, 8-bit/color RGBA, non-interlaced","md5":"1b971a8049fdcdfe7f764f8c58889bbf","sha1":"4bfaf28f9fb6ec6808833bd396d06d9acce66ed3","sha256":"5a91fcfff8f6a53c6a5a7549b2bb8e7c96cfc12ac63466fccf216e37f60fdafd","sha512":"36369cf611aa224df1d7c8b8021b59b2695a7f20ed4ad5b9a060a474ade8d85109ba84520b999d872b675085998179e0333bcd7cfbbba2d9d303ed4cdf29da10","ssdeep":"","tlshash":"a60144d47347e171dad2a42191868b91c7a20e281fe573dfbe85e0ab8aa30086cc412d","first_seen":"2025-11-30T16:25:47.874657Z","last_seen":"2026-04-29T23:30:42.145726Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/86b836ef7093cbbc2976625dee6edd6a.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/86b836ef7093cbbc2976625dee6edd6a.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zx73wLQ5Kmb+pr6dob3fZ3eCsR1Exd+fdsiaiy/vDREdKNlJN1cX9ucd0YApp291L9A5UGxLCmbrlOo1Wo1EZCvTkm/kjrG2\r\nx-amz-request-id: 5B39KJCVPD3F2C4H\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:05:37 GMT\r\nETag: \"fbd20e5b22b370fb99e7d740877e6c7f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 179098\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":179098,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGB, non-interlaced","md5":"fbd20e5b22b370fb99e7d740877e6c7f","sha1":"1e63f6d806c532062e700391981b4e322a5b84b2","sha256":"b41c876e7a8dffed3a798663feb629714070fdcd05f4a752a8663fddb2c03aa8","sha512":"2bdb34d53140bddda6ed09f8d79e2fab25d6e3988368c1979da84b7e86807a5086cb46880143060cd48d45207cb3c43d93a07dadce39366fe0433a52222ace5f","ssdeep":"3072:hLeoRn5cQ60Ibx4fo3wq79QVPm1V06sIrBI9h064112Vu/DvAkt41O6B:hLeoRB6lZQpmrQET7Eu7T4c6B","tlshash":"8f042283f1c7cb4cc8a5288377be371a454b923e92d543b9d0d384bf082d097b1e96a6","first_seen":"2026-03-04T09:22:28.677214Z","last_seen":"2026-04-29T23:30:42.025784Z","times_seen":10,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":393,"dns":0,"connect":0,"send":0,"wait":120,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/tab/pp-off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/tab/pp-off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 785\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-311\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: eymVl1tML6-6xUNINnKLKle-uqCs66ra3KRq33-wAKnekCutps5hVQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 50, 8-bit/color RGBA, non-interlaced","md5":"cf9275c3e46f282468ba8b568c8132db","sha1":"c7eba04e447d42b2b5d74bfc5a6699005695c9a0","sha256":"9f5da78f966ad19509f2610f910c07384485210fab5767a1df3680bd6e32df87","sha512":"702118a2df0d4c325166ef13a32c34066f790e99fbf1a31adb9e1e1f100ad4386cd2a0a73f0542b641a607ac04967eee0753b613ca78e09e786f47967a02567c","ssdeep":"","tlshash":"f50175c68d859834dc6c9db0c97ca02474014359c2ede9db840514acff54be2543a85a","first_seen":"2025-11-30T16:25:47.841863Z","last_seen":"2026-04-29T23:30:42.086593Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/7.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/7.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2134\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-856\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: XuQbVvLwNxr0gS2yNjW52hJyTusani6dQPw4Kmu3nwCWwXvsAncrsw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2134,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"51a42b6e828130f21fc99046889326f5","sha1":"a39a230cda73a05b69e70322a1a5ab36ebbd3f37","sha256":"fccf6ae22803c47679455790264bd5ba1577fa1b2618b496ea6cf4ca9754fb3e","sha512":"a28d47ac1ea4f0a719a00f3aba8d70c938d7e7f2a0ecdc064c28c607920eadff591c17bd5ebdc52fd90e54efaf6c2cd691e151b38f2330f4ce6f5e01d2fe7cc2","ssdeep":"","tlshash":"e2415a631fb0c19dcdce9d0803c3f406118adaada6b54ed0f5ce216238b41df628707a","first_seen":"2025-03-10T10:01:21.183365Z","last_seen":"2026-04-29T23:30:42.142265Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/07da2358857649e08f942473c6eb7ccd.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/07da2358857649e08f942473c6eb7ccd.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lXDofPAjbisVyo6FfG86d4LdOVyjgxMj2U8EoqS04BwViGGG4RYauK2QaGvUblFtSgh7Oc13lbpv5bX+nl/5xN/mptd/4oyL\r\nx-amz-request-id: ND7BBRHN3CHR51CX\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:17:42 GMT\r\nETag: \"acf42942e4098f4608fe9146c5505d78\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 70884\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":70884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"acf42942e4098f4608fe9146c5505d78","sha1":"3c82c92908536e64e0c1d11097fd23be6121dcc8","sha256":"aafb95c12f5820eb3dcfcf2c87eca52c56fe0f0b22536529d293a009d998950b","sha512":"1b28277fe8b2a56cef3160a2580e7100a574e8378e8dadc2c2ff5308a662fb073ece2c30dc81a60eadcacd8710ae0b563d940e576033515ac782782cbda4db25","ssdeep":"1536:fwsvMbaoYNRb5Zgjowq/v854HWwHOBfYFQLH:ftwarNRbfgjor/06HRORY+LH","tlshash":"776302c04bc09b40625b3a005fc52ea634322febd3b5257cd66d5521a9fbde6f029d13","first_seen":"2026-03-04T09:22:28.71852Z","last_seen":"2026-04-29T23:30:42.156906Z","times_seen":10,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":586,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/Notice-DXm4lxgd.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/Notice-DXm4lxgd.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-1f9d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: n8X4xgjVx6SUgintTTF7TbIuWrw1yFIom1Vl7U4H_7HElKVroR8Mfw==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8093,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8092)","md5":"75b5179a660259589892b9e1fbac909c","sha1":"63eaf7e1eb54fdcfa369c1a8c3d017a23960b928","sha256":"f618246794a2fb69ecb4065ed7e3288ec6ae09382cb66f2215a7ebe5357aac94","sha512":"572e0fe8454a4088ad115358b743228cbeffc4b0c9572ada6b9b0796ccc36d9e576f36451194188fc58c2645c1b238cab18b458454d0c9ee3e89796ea4ac10f5","ssdeep":"192:L5AXtbXygWmcDycJHpxyy2gA94BBHmq0qDn/iRAJqbt54DlEDw7GttuXG4XmBaKB:L5AXtbXygWmcD1JHpxyy2gA94BBHmq03","tlshash":"d7f1f54ff90da66450bbc31596b05eda580d76f78312117daa732912cce717a3b0fe88","first_seen":"2025-11-30T16:25:47.880966Z","last_seen":"2026-04-29T23:30:42.130793Z","times_seen":15,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getNewFirstCharge","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/getNewFirstCharge HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: mupCiIO9Ew7YMRNkldTK1ZzoDwW1Mn1TLsGTmnBmju_gngKAR9LSkQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/9.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/9.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1488\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-5d0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: MjUact6swXXnFVy5BzxHHw6B-fCm8_Fv6l5u2bqmWu4g0DjNcq0Jyw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f94d1207b03df02fa2bbb6b98bb5f35f","sha1":"a2bf9894a9cab041a1a411ad1ec48fffe878668b","sha256":"23633ea0682dc67e08285cdc20c59fef6f51257ad85ff6be265d2bc30745e584","sha512":"273f650ebc18d3bbc3c195f300475945ae9035e10093f911e148d6fbef6f023032ff7ab7a44f9da962ac1f74d222fe8df3237ca7b0a64517890c0ea7ac349495","ssdeep":"","tlshash":"be31f90b4c0032bea4010a03b96e415d4a56e52579312471d2813e6063ea9f3fdf3e52","first_seen":"2025-03-17T17:56:16.839067Z","last_seen":"2026-07-15T15:17:27.060118Z","times_seen":16,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/39ef1b0dc204876344cc59c1f645dce2.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/39ef1b0dc204876344cc59c1f645dce2.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AvCflttIlvDDun1bUkYkHe1SfVC8qfyAGi7wJnKtDctPYxRLoZ/LPNW7BPSo6rEjtiC8kl9RJno/o2Ngj/Gjgn0zuTRwR19D\r\nx-amz-request-id: 5B3ASZZ8NH4ARTCX\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Tue, 14 Apr 2026 03:22:54 GMT\r\nETag: \"c6b66eab856f5f61f29a7ae43ba92503\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 23106\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 693 x 229, 8-bit colormap, non-interlaced","md5":"c6b66eab856f5f61f29a7ae43ba92503","sha1":"7a69aa4b5a75d05e47d662d9efe57bb221f10b9f","sha256":"6158d90175de5a6a1d00362eafaac118dd70673ac3265f79077409dd408cc414","sha512":"d7ce50224b288fa1082094db136e8b9724fa92343037db36f0972ee206dfb8630a9ea4941a7ceae7dcef44c4ee63f4fde52f061ffb0f0194427ce0b26c6a1e22","ssdeep":"384:+y2Uae6dA7ne5h5n6d7xMNk0xaQfNzVup20ECm2BE7juRAx9JkhAPpuK7EIo5Y:9aec8a56dl8VxaQ1zVb0Ez2fAxOMuK4+","tlshash":"e0a2f1f3d8c070fc43a994379a5e41b06e8c33dd6119a26f718286179a1e7d63efc122","first_seen":"2026-04-19T09:13:28.952597Z","last_seen":"2026-04-29T23:30:42.181545Z","times_seen":3,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":289,"dns":6,"connect":94,"send":0,"wait":130,"receive":2,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/00d0d8b98b4c92e23dc934ff5a223e92.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/00d0d8b98b4c92e23dc934ff5a223e92.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: b/JjfGG1lZ6sH2EKi/vZnZbBu+7bY6B9NIC3xDl48P4cDGI7xr9COEJqR2pTO5trizEzpSIF9vpDOqOULVtjRfSF9ZqoiKaR\r\nx-amz-request-id: ND7F2PZ9D52XEQVX\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:17:58 GMT\r\nETag: \"c4bc1ae128ff7edbd79341a0d8638ca5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9602\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9602,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"c4bc1ae128ff7edbd79341a0d8638ca5","sha1":"9726c388fbfaaea5112835bf6449023c8f87cbc9","sha256":"07b76f2cac3be1da4c6e25fcad5f051aa130f3e86fd0ef4c4bf8b2f16b91e264","sha512":"5a6069cba0fe7124ca6652fc5d6ce902a7a28b710424ca1a9369da40c645105aa9ab4899b665b49b9f7ca1f2e4be4ac8a7bd8f390b6e4158cbe9ddd56d6a59d7","ssdeep":"192:cVKrimmbrcaZO5P4Zs7+ez6WZLxPPOTjh+ZZ6XO+X0RlIrIhloIYu:cjry58ez6oMjhuZ6+irrIhlo2","tlshash":"b6129d553306fad4c105873036d83b01e5aa7f0193ce92bd638ea42f6b71ac7908ce8e","first_seen":"2026-03-04T09:22:28.696997Z","last_seen":"2026-04-29T23:30:42.095659Z","times_seen":10,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":607,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useDepositStore.BjajlgA0.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useDepositStore.BjajlgA0.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-6bf\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: qj98GvIKn5Oq02Ip1EVWAFGTHXXJNPOooHfL0OLeIUZvvpzGvfKfzw==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1726)","md5":"1c2b85ff4921ca29024090b245074165","sha1":"580d749de4d4c1dbd97ebc25051aec45729f58e5","sha256":"55b2d8434de19b1b22926ab30a2337eebe3fa4e21ad3e62bfc47c84894ddf277","sha512":"7be273fd32522725b548c7fdb070cba321eb6072e99a2aa97c6e104e10c5ae31a5bbc3e8016fffc277fc8342fc11c0e588b30523d2e9a34c73a2653427f57313","ssdeep":"","tlshash":"353145cde2f481b209e7dfbc88759912fe20776c04d36a4097dd6a20375cd47a27ea24","first_seen":"2026-03-17T17:43:41.173569Z","last_seen":"2026-04-29T23:30:42.04623Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/ProgressBar.B4xsQN7o.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/ProgressBar.B4xsQN7o.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 691\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-2b3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: cbjPDgatT9zI8zsHW1pWjPuuadcJhaVGx85fXYS5N-bzcxnyaPGZSA==\r\nage: 85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":691,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (690)","md5":"b109fa9dc37f4d8eae89ac1398198216","sha1":"7767083bf9025fc7bc99b6dc882b960e2c5fa995","sha256":"4430191ccc080506406a3fd17b2e14997dcaf463cfc7d4d843284849984dedc3","sha512":"8ac90b3f11b11cd140bf521a96ea587d35e8e56b8fb45324f80e70bee1e861ba44b9cce34b99c29925926a9e5f0c4f72f654495e45bb27871f7b6ae5de64be63","ssdeep":"","tlshash":"a5017b4c7daed2f357934c8c91620100275b0edde237baa59df1022c4323a684dac798","first_seen":"2026-03-17T17:43:41.168112Z","last_seen":"2026-04-29T23:30:42.027568Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 244\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":244,"data":"{\"sign\":\"3e7e5100b853419b72198051250409e0\",\"uid\":46001926,\"time\":1776958488125,\"rand_str\":\"09878d63d5267d03e000c4cdbf8e345f\",\"lang\":\"en\",\"channelId\":10023,\"deviceId\":\"dfaae9cae854a313c03fe591012c2ac1\",\"os\":\"pc\",\"eventType\":5,\"eventData\":\"2024\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 35\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Pr8ZolOr2zophi11Kt0Ny6CsA9Hv-WihxpM6LcByXF92UaCzSpiekw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e4a764f622d60195f6aec7a35a930ce","sha1":"61fbe38afd20fc9105df9ae196f46571faf79cf7","sha256":"769573b07ea424d002aac26a063596ab9647a18a680c921274c7e94580143a90","sha512":"162c48ebb8eb57782de7fdc8d6b2f611f44e05c75fc5b826fbae014e24daaa5a628dbad18a847b70ad330cbfadd6a44ca823199b080bd514a57f88b783f7ae6e","ssdeep":"","tlshash":"40800400153c1c5517034145300d1404405d10404c4110114c4c551c47044501131534","first_seen":"2024-08-19T16:58:49.888719Z","last_seen":"2026-07-05T14:49:46.751703Z","times_seen":31,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/700368f165e532913875fa2672e2f7cd.png","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/700368f165e532913875fa2672e2f7cd.png HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9aTYL7IEcPvXIPyR3PE5Q+ysNcd5QoXqLKWPM4a4HgdUM2bKWlS3OCGyZMjGSa8uUmsxCHDXjjhXYuiZDPnYpb9jpaWpjOuJ\r\nx-amz-request-id: 5B35VMN6NEXKK6V6\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Sun, 04 Jan 2026 06:09:01 GMT\r\nETag: \"2056efc41a4cd7c539036f7e469813d0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 101222\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":101222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 694 x 230, 8-bit/color RGBA, non-interlaced","md5":"2056efc41a4cd7c539036f7e469813d0","sha1":"6d973ef5191c6c1889fb22e0671e79ffbdcbe231","sha256":"9515faba3bb753c961b86dcefc3c7452c9ccaf27e0a8b95b6a4602bf9b608e0e","sha512":"b0c375b048cc8620e615f4f26fa37f5fca6aabcc6d47913eb27411839c8286e6863b38c1e954602fa589ae85fd1dbba42b64c4e524287de639b16a4842db0f35","ssdeep":"1536:n91IlMG7nRaXCAZLAnejJSNaC/vtQfQq03F350CaG2kcZxZrhtNv+aI5mfXC4AOZ:9ylXDRnAnjyaC/vafvOaG2hdff3VX","tlshash":"7ba302ccef98bbf23461f5220236748f82d1af4d6056ada5e966eed727f44a34263110","first_seen":"2026-03-04T09:22:28.714002Z","last_seen":"2026-04-29T23:30:42.169109Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":394,"dns":2,"connect":153,"send":0,"wait":180,"receive":307,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getBetList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/getBetList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"0ff38688e8624ec2dc22149335c75fd0\",\"uid\":46001926,\"time\":1776958489108,\"rand_str\":\"bd7989a85be7c16ea34d9698955399ab\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:49 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rA8CRK4IhQd7Kabiy4fNnMNM9QnpkEQhLB6UhqImep9kSzUscOsi-A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4784,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf6da35339c41476f2d1e066e7500c1c","sha1":"7a8b4d04e0b43fa5f908fec5c34c609a4c44fb8f","sha256":"7780973a851c666015404f17a93d9f4136fae0b8c5b95e8604df475d7794eb3b","sha512":"1df400d324153e4b25468950d05a5de15583e9e0d94ad89545b9641db6e6e8b0e2a6943dd7e99d96d9fc41638aa2f5c64d0a3edeac1a5d72fa597b5f5f2ed724","ssdeep":"96:k40b0b0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0N0q:VQQWWWWWWWWWWWWWWWWWWWWWWWWWWWWD","tlshash":"88a1ef2f6c4f9ead2d2208007e07394e3a9d606ba2c1cde11360eeaf2d55d575837cad","first_seen":"2026-04-23T15:35:15.338831Z","last_seen":"2026-04-23T15:35:15.338831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/util.DGNARWfw.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/util.DGNARWfw.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-465\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: HsPsuMSQ6enYZ9et-ZzmcQ7YWnfG7IogcK8HH-8F-DHmNGeHuoso1Q==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1124)","md5":"26b2cf9b11518be8eed608d05eca8b15","sha1":"5ab7a19cedd1f5bb39b9887e0e5ffbbf403bebd3","sha256":"b10ed9298cab2dc3a73d58e555d1197ad884a4553236f7f4a03bbd9cacb83c45","sha512":"045330e8da7eaa312861e5c48717cda0a3b9016eea04425d0f07fc04bd087b871d2949945620f9cb5a242203de6c80c15b0baa56c7c7394a564a4673011c41c6","ssdeep":"","tlshash":"b62103d83242f1f5834c11d801781520f15d4dd6367b8694ca9edd177722858f2baba8","first_seen":"2026-03-17T17:43:41.213637Z","last_seen":"2026-04-29T23:30:42.053608Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useVipStore.BlOc-6Js.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useVipStore.BlOc-6Js.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-4b0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: BLPVsKaRIi6mdEUFicmWUzYXQsEdoy9f24xUbVj-iyQKGMLY79RhRw==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1200,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1199)","md5":"6ffe33c40c5fe1accee0eddb6a150d2d","sha1":"c80938d6b1a6b854da4fa5db140f20966c5b4214","sha256":"0bc2412c5675c146ab2cbe90c9c448ee9e749172d21fea6dd311adea13b8984f","sha512":"84de130d2936add3be6bd726b3d67517e76afcf01ed4e67ef4e428dfc0c1d8629eb0c27629b8840af2c93a7b4aa193c91beee8a50495e96c7c8ce977a2e89505","ssdeep":"","tlshash":"6421e26f1aca54f7459da9cdc0196101e798ba46e06820999f9f2f11290cc43f1a3f10","first_seen":"2026-03-17T17:43:41.158197Z","last_seen":"2026-04-29T23:30:42.120197Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/btn_close.CTrYlZKH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/btn_close.CTrYlZKH.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-6e1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fXx4YkhypaP-NHpeXwIPJsmnFSQbiRh2mlBEO5KiT10jWPk0AQDZwQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1761,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1760)","md5":"987ebfdce42147ae4abbee784242458c","sha1":"6f7099e7fd39a58fc29447e2e4299aeabc0fcab7","sha256":"46541f032a1fc5bb706895a74307e493079f2f340563821d451725c65b294f71","sha512":"6bdbf020065f37afd4a49546f14811ebfccc5b8d795d5308b8b0a29779bac3b1abc675bddc37428d459f3132338fc41e1611a803fdecd6731b1816617cdc0dc7","ssdeep":"","tlshash":"db31e9b7408bee63d6d94c4ca94f80084d72ce01ee51f4744974534d9d8bce09a7a174","first_seen":"2025-11-30T16:25:47.818224Z","last_seen":"2026-04-29T23:30:42.047112Z","times_seen":16,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/test/popIcon/BHdownload/2bd9d12f9decbd9e580164db6d0dcab1.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/test/popIcon/BHdownload/2bd9d12f9decbd9e580164db6d0dcab1.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 65vjCGVreeYwTmePmsG2RhW+KoMSJRmAqSLHcd+Pei0ev65D7Syveo9S5YBEyFpZpNvcQ0ENKXFNY2Me3mym95Dj0xcFRnLz\r\nx-amz-request-id: ND7ARM2S2SFFZAB2\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 05:10:28 GMT\r\nETag: \"36e4df7557f9d4875b06976719374b7c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 11730\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":11730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x400, components 3","md5":"36e4df7557f9d4875b06976719374b7c","sha1":"0a6122e8c7c436ab33130e0f2b224416b70d9498","sha256":"bab1a7400a7e4a0cee2ea6c4c15cb08df041a749bed1182bbf5b5de4ab075a1e","sha512":"5474b4445dae2aeb7eefc023a14d58b664f8a837977589e37a1d1cc411fe020935362ce1907c466f4a29c7c578a575565473038c988fd280dcf89d87978586cd","ssdeep":"192:uwJ+5CljsZout6r+6eKGo0CgS4PUpecJ4gGxKyX+Bds/id0qLJDkzHpfpgti9:uwJ+4Ko4p6SegS6Upz4tx+xd0kD4fpmA","tlshash":"5a32bf82855693e8c1dcd1f7648e41dd70dd8819b93d2e9beaeff1303601a5088ee9bd","first_seen":"2025-11-30T16:25:47.825198Z","last_seen":"2026-06-17T23:31:32.662067Z","times_seen":15,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/7aca83502ee6aa8e23f6108affb0bba8.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/7aca83502ee6aa8e23f6108affb0bba8.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OdGpeJV9ZUPM4HBJDPmNYDrESTbbdOydJD6vcTYBrPHrorpMyJrs20ghrxFdp4S/3damJ34Y3pw8I7IJpniRX2Jdhr8VAQLL\r\nx-amz-request-id: 5B3FP3HPCH7Q41YV\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:05:59 GMT\r\nETag: \"7450f6c074a1ece0ffb62489c3088f5c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 71451\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":71451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"7450f6c074a1ece0ffb62489c3088f5c","sha1":"4b121db35ed2718ac5fb22417199b2006220d191","sha256":"6e5db53e1b9a5f5558911e3f5a3fd1ed3c968aa6d58c270efe830ec63f51e357","sha512":"1c6f2e098f54a951dd976c9ce5544f09e82c30fe7f8623d2e99950008b3149f6c0b6416c95c8f7c564d6b97b536135a0ca5c21177b860147d83a854f2986a93c","ssdeep":"1536:Nz3XlGZsSdmX5DB8q40guTsMwf1NkKZdpcKR6RCggf87:Ga98b0aMwYspxegf87","tlshash":"836302a5e34be1a0216b1d60970f8adfa11250bcf9dec849bc1da309c5fbe9c1171e97","first_seen":"2026-03-04T09:22:28.724778Z","last_seen":"2026-04-29T23:30:42.161348Z","times_seen":10,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/index-mNylEhi1.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:45.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/index-mNylEhi1.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/group.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:21 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-44bbe\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: DRQgWWj8IcrP6GFc-QntISq-28-xkKbks0BniRc2GwgK4bINFozUCg==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":281534,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"8784532e316267dac49dd1b95b229018","sha1":"f6853b89ac108ad6792d42d78e9289a423590f28","sha256":"0712fcc912a37dc4adb5220e2f0d6e952a21319d96000719f4062de3a92e6141","sha512":"48c19bb0200b56230d97d71956b34cc3cd0e8e2f31006e11b196dc3c9fdfba815b25bd143d660835c7ca6c4ca9288c0378559d548813a917ad07f398437ad5e9","ssdeep":"1536:8001IyNBi3MFYaQj7FCwsBlDOFIxuVoxie8sDT51Ah5aIzUCVSVwIsDB26:gvNIClDsIxuVSNuWhsh","tlshash":"0954e89aba5860bcbf3bf2359b8797dcb13cb561cd02d6a8f10251144dc77f21a23a19","first_seen":"2026-03-13T00:37:31.570136Z","last_seen":"2026-04-29T23:30:42.191723Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/31501-300-400-.png","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/31501-300-400-.png HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YnhblKiDEARuHuwAmhogEhPlOBUtkKddZZj8niKdnKr8NsbnxtRSXNnYiJvicx/o61ctleEuf/s=\r\nx-amz-request-id: ND706V0V8TC67WDM\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Tue, 25 Nov 2025 02:45:54 GMT\r\nETag: \"4eb8f6c634ebae127ccd05af0745f4f8\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 57403\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":57403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit colormap, non-interlaced","md5":"4eb8f6c634ebae127ccd05af0745f4f8","sha1":"bbf9ba71af34ac5043382b3e681365a892481e48","sha256":"9c5980f9f97c39b1635ce8547d55b471a5ecf2b9c664955e2c65deb91c68168d","sha512":"ea9ed8fd911448f2e954bf8e2b32cf9107b45ff257007f620e846a8bb26030c2984d282535b3b2bad9ab3dcae1a7c0b54dd0abf98fc01eb7ef7e92db686c5070","ssdeep":"1536:Wz9Xo4qLic4YAXzBnkiZv35ZYSAW7xCfK:Wz9OLinDBHB38Y8fK","tlshash":"8e430276bcd7c34a606c2629130d0dab1d5b12366dec06dca98be90c3f344deda957c9","first_seen":"2025-11-30T16:25:47.848434Z","last_seen":"2026-04-29T23:30:42.18251Z","times_seen":11,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":603,"dns":0,"connect":0,"send":0,"wait":171,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/824ea72116147717fb41b6447b04c2e1.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/824ea72116147717fb41b6447b04c2e1.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DaXkKwhCOlbbzTw2VpvoNtTeLT+/NH+xiII0e0qY5YHbYisX0KXCajSgYwKQa22A4YwKKsFfuB4=\r\nx-amz-request-id: ND7ET07P7JFE473A\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 20:57:57 GMT\r\nETag: \"b74fc60d7cfea869b307730a43c3fe38\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 42310\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":42310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"b74fc60d7cfea869b307730a43c3fe38","sha1":"fd3de4cdbe01de8942df14b0e288e4623f26ae41","sha256":"ead43d7fff39f097b13353c5cd5c42fcac32393de41e2deb98c9fcdc6da8d135","sha512":"71084acb8b89a20f5154654496b06bb143b0a55357f65acd3c729be86dbecd378f9b952615c60af6f6f1ce795e7412f1584943aeb48bbeb7d7ad08f70f703135","ssdeep":"768:74Lz0/IobMGbP/Lz0/IobMGg1r8/2ddFuResC6iBE0pDRNVcZRHUSx7wx5:pIuMGSIuMG2XWYsC/BpREHHUSx7S5","tlshash":"2913b03ab6109cf3f9c2177858a8efb60301bd545963262b7dde7c0bbb742840a2d593","first_seen":"2026-03-04T09:22:28.618394Z","last_seen":"2026-04-29T23:30:42.200576Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":838,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120049.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120049.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BQfbogBB6JlEuUgDDClmiDX4wVoS/TlXcbe7dmeo6Gckq6Ad275zdRq8IP43Br02xA9+VtmTUb4=\r\nx-amz-request-id: ND79HCEAYZ30FDB5\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:33 GMT\r\nETag: \"04a304cb7b374f53d22335bda5abf383\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 52067\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":52067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"04a304cb7b374f53d22335bda5abf383","sha1":"b9e0517ff05063010fcafad9fb53b502c641c12d","sha256":"8449fea17351f2681d32f001805589550ec0180e3fd57cf47c268abe38ba2c4e","sha512":"759fe4d5e47f789cd73babb80eb778e08389ed58cde1fe3b2286a565e34d7772d3a45fa3cc0fc731a81c766fd006528937bf39e7cc109eb4011432d38282983e","ssdeep":"1536:AsFuDHr0oBsFuDHr0osoTDJgJVf3mzf1dvCNSQDtcB:A62AG62AgTtgJVvm5xCDDtcB","tlshash":"a733d00313c48d62fed0617851d7c67a62106cd8766b379672dc2e4b3bb22d18a3c6bb","first_seen":"2026-03-28T21:45:10.894264Z","last_seen":"2026-04-29T23:30:42.201388Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":178,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/user/v1/login","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /user/v1/login HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: \r\nContent-Length: 468\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":468,"data":"{\"sign\":\"432327fe5c4e5a77745eeece02694e8e\",\"uid\":0,\"time\":1776958486800,\"rand_str\":\"3b48cd24a073737128d1e148336824a7\",\"lang\":\"en\",\"login_type\":0,\"product_id\":10000,\"channel_id\":10023,\"device_code\":\"dfaae9cae854a313c03fe591012c2ac1\",\"client_version\":\"1.0.0\",\"bundle_name\":\"com.sanp.game\",\"os_type\":3,\"phone\":\"\",\"password\":\"\",\"captcha\":\"\",\"agent_id\":0,\"ad_info\":\"\",\"adjust_info\":\"\",\"suspect_level\":0,\"self_attr_id\":0,\"fbc\":\"\",\"fbp\":\"fb.1.1776958486.2526155038\",\"bbg\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 712\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: TEwWsuv-8ccSlQ3qLiT1zb8zria-j1eeeVZQLwu0lkGwRGf59doE4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":712,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ac366e3fca7305d63d524d5220527e26","sha1":"3fbd3175ef0dda9f2fa87e7078bec04afe993c48","sha256":"eefc4f662cc9f430c5db555601661a19ef281fdfba89deadc92c93daf9702b3e","sha512":"2f14d575fdeae37e3a759ad22cde4f0fa656f380e5ff67ea9284ca16643fce8c0067fc5f56947e3372254289f547f175f072609a5fbaaef0ad0776c5787af3a5","ssdeep":"","tlshash":"0f011515017580e49fc5b5c03813494104cc31648d65ed14eadcee0cc9b4984771593b","first_seen":"2026-04-23T15:35:15.345903Z","last_seen":"2026-04-23T15:35:15.345903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/avatar/14.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/avatar/14.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7983\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-1f2f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: wDL3hRwnn5_Jdr3-6QrFGFY6adVGDRJbsi07R1fj0PVvhIjcTy0vcg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 142 x 142, 8-bit colormap, non-interlaced","md5":"a5b3ac674e90972b8d7f2ebca9e15c61","sha1":"1e5eed2169f924f8f0fba045df62187f15bc6766","sha256":"f014bcff55e3d08cac3b98ab14f224eef09719e7176bc7d940677d72614862f5","sha512":"89ce8a4550fd1da09bab2938b72981bf32215e169563348316ffdf3eade0a8735726a468b1a0942c2394b864e0ebeef55ebb301348db171ed38457c3265f4ce4","ssdeep":"192:ce71dKk7CRrIIs6nv5NfNg4OKCFEoz7Brx:ce7qSCJIcW4ezx","tlshash":"15f1af85a0f0566127b70e0f686c52d17054ef47819ff3f9933a706c95ce4bfd181a98","first_seen":"2026-04-03T16:27:31.886714Z","last_seen":"2026-04-23T15:35:15.346681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getGameConfig?channel_id=10023\u0026client_version=1.0.0\u0026hot_version=1.0.0\u0026bundle_name=com.sanp.game\u0026os_type=3","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"GET /configura/getGameConfig?channel_id=10023\u0026client_version=1.0.0\u0026hot_version=1.0.0\u0026bundle_name=com.sanp.game\u0026os_type=3 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: \r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 581\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:46 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: sgV6pI-2Gz-UgnPfdeOiHP36dHMDmCkpkcGJr-BsQkHbD1DMa-2P4g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":581,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f8fac4250f6a1a0941ebab329cb75cc","sha1":"3ae21f1538031bd478e5092be55a2933f2c64d76","sha256":"847e8b7922b476c6ca93da1327811f739339c9af7494f72e37c70ec66b179bc7","sha512":"6443f6e3326f5f08172b5f50a732105c365cbf45e403bfdb534423776166f965fee3696897eaeb7709bd66bf90063295ef3a32a56ec9ba6ba1f67b92253842d6","ssdeep":"","tlshash":"3df0413ecfffcda206b8f0d2041fe10563ae2026a188c0c08a30a99de6641d11d1dc4b","first_seen":"2026-03-19T09:33:12.286751Z","last_seen":"2026-04-23T15:35:15.347892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/Notice.WQTXd983.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/Notice.WQTXd983.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-7ec\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: wuRxw4Rih59gIe-47WA5JsteWt1Pk7FYtj6qOPHKS-WQW5cwIpD8KA==\r\nage: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2028,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2027)","md5":"ffba2cd6634507c0f872446195b8f703","sha1":"b68a3deff41250493cc0555b06013cc0e4688c17","sha256":"30d2489351411847da00d6426f88d0e4585c8f08e4e0f1ec9d2522aa1c6104cc","sha512":"403f3191f53bcb39e3fe09b2228523a529ce1de25a9b73077288129d9d1f3031f69ca48efd272fd50d702d787443a0278b1d5a78d18c038ddababb3c413e31b2","ssdeep":"","tlshash":"3641615ee861c6b183e5dcccd4e0001791272fd90130c6a0e1ff9e169a7ed22e166f29","first_seen":"2026-03-17T17:43:41.188503Z","last_seen":"2026-04-29T23:30:42.041401Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ws.4kgame.us/ws/?token=Bearer%20eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368","fqdn":"ws.4kgame.us","domain":"4kgame.us","tld":"us"},"ip":{"addr":"3.164.240.22","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4kgame.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 15 Nov 2025 00:00:00 GMT","end":"Mon, 14 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"71:22:A3:75:63:35:49:44:1B:05:08:E9:F0:45:90:C7:AD:62:52:F6","sha256":"72:85:51:B7:3E:BA:2F:2C:DF:70:E9:4C:A9:E1:BB:B1:77:26:FB:CE:EA:36:D5:34:FF:06:C8:1F:DB:A4:57:6F"}}},"request":{"raw":"GET /ws/?token=Bearer%20eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368 HTTP/1.1\r\nHost: ws.4kgame.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://seven7.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: rq5XziC7FJi1clJEAAD3gg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 23 Apr 2026 15:34:48 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ySDIW4XQqp83AYUzVrEQyopz8/s=\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN53-P2\r\nX-Amz-Cf-Id: 9qEFAbMiLFNjH1NMflvzTmtr61J-0XQumhCpMQrm4TICJS4LyXBe2w==\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":0,"dns":92,"connect":99,"send":0,"wait":388,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"ws.4kgame.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"ws.4kgame.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/test/popIcon/BHdownload/8cc62656e7e3b8c8d3788423274f2ffb.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/test/popIcon/BHdownload/8cc62656e7e3b8c8d3788423274f2ffb.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 7Pfh44A3fEsmgLtuHOfOgm2Lr9LP7SIRAfgRK9XtNalLlQYstLNmYUASCJL2AtH7L2wmFranfUZ86HAjjpP72GhzH7ZYzych\r\nx-amz-request-id: 5B32QXP6BD2QK7XN\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 05:05:45 GMT\r\nETag: \"4f415015fd07a5832efd46cb176e0b00\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 158938\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":158938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"4f415015fd07a5832efd46cb176e0b00","sha1":"5c080b9b30d70025ce9b5fc6a969fa33e83de9a6","sha256":"1ed1098496e0c9c027940fe3a4e441e9762580f68fcde6c7d2f43cf88aa28b2a","sha512":"901ef958f6b94c59717ea435b7e5fc7db3d92d220206fe50074faa26a7e0c8e2f59dff723935f97aa33c20c6c4b6147e8690e8149f4978a202f41b57502e9d59","ssdeep":"3072:VOsmf5MLZVS93x4hpG29Q22o2QrrJUb0fXJYV1/yskNtBBykBMj07HUvWPRUg8Rp:EsS5WS930pSsPU0fX2V1/UNBMju27Rp","tlshash":"fcf31270e9bfbbde0412089a717c16f20a675859147b9b2cae491fc349db4026f0e7de","first_seen":"2025-11-30T16:25:47.890155Z","last_seen":"2026-04-29T23:30:42.087575Z","times_seen":12,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":129,"receive":191,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/d7118c4fa38e78e742e177e2125dc142.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/d7118c4fa38e78e742e177e2125dc142.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XbloxNHwDN7+kIV8r/paZySOgcJClI4otrSaHKEftyrh/FWe6gkO0rYFWkhtiZfH8BezF4HKfdA=\r\nx-amz-request-id: ND79QP8ZZEFWSAPT\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:10:39 GMT\r\nETag: \"3fc9a5fb933c5e35d0694ef88ce526d3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 16722\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16722,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fc9a5fb933c5e35d0694ef88ce526d3","sha1":"d00745ad9b24bb6241de185d8ef777e3c826c65c","sha256":"b7445036a2f7377f1a8d1d07f872e23a2c4417c434cacddc5217a39746e123eb","sha512":"a3c07b0ec2911b2318a24d4658e79ad6c4d88f28d7b9558b22ee20dc4276839380c15c15a520995b2b56afe4d085bf90fd122204ad57ee81933dc50bdae64d88","ssdeep":"384:dFtgOKYb6De7hrqMk7FrsVB1dt8FY2GOT+dHs4R883Z98yFKJMX:dTSYbV7VtyReiKOTmJ3JUmX","tlshash":"b372c088911723dbbff7c0f4ab5e2aafb5ff19006e290d3d530ec714a76b52a15800a1","first_seen":"2025-11-30T16:25:47.793868Z","last_seen":"2026-04-29T23:30:42.152497Z","times_seen":11,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":639,"dns":0,"connect":0,"send":0,"wait":176,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/mall/getProductsList?uid=46001926\u0026version=1.0.0","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"GET /mall/getProductsList?uid=46001926\u0026version=1.0.0 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Ux3jAZINqGrl6rDXa8gKSRxmLkefR9iC0AcXs6wq8PnM0NAmnT0kIA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5050,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"70432e6b7a3fdec3838e92ff5523922b","sha1":"f2de524325a21c11f74d1d19df61cbb43a128a88","sha256":"b2438f4be6145e453cda6990d6388ce6481d123884c960f02fea0192cc122669","sha512":"b76367c79594d93797815f1b2922f2e7adf026c053d5a4cdba964064ecf5acbaeee3b0318b0dd5523443dab750ba5d41e61d9b18c9ef870b2b44708d898c05c9","ssdeep":"48:YdD8RozFAv3xMMPssElyP5L5+H73FEZAU/UQvHrPssHYFV5LoxjuAtEPAv0:k88AStnyP5u1gM2YFV5+EX","tlshash":"b0a18d5eb8c49ee19af03fdcb8673c6a51e8708dcec5ce95c6f68c2802d4d952614663","first_seen":"2026-03-04T09:22:28.752361Z","last_seen":"2026-04-29T23:30:42.132242Z","times_seen":10,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/firstPayV2Config","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/firstPayV2Config HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"bd376bc890a005c94dae6023b53a6201\",\"uid\":46001926,\"time\":1776958488009,\"rand_str\":\"2f4eac1da27e675c19474ad9b0a95f2e\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ncontent-encoding: gzip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin, Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fMRM4aq3gh1onrN8YXZlAkGPpTjMIR_VgEl986mYDB5b8ICY2TxGUA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"652ea8f1e2a5924aa54243e9b9528ff8","sha1":"b1094a19eb1087791bf13b54b4abc9cd523ea449","sha256":"22a1ace77461e4001adda24808a69dba462a94e608fbf85cd90eb02c15a55266","sha512":"91bf6a2e5da1802506c51cbb6ca68966e11f07390303f58bc569c25fdc5b7c494b3475762a72de8ddc3b1b28b2627ae0b01a854a45ad9913c259efd8f373e14a","ssdeep":"","tlshash":"9641116af74ed1a49923bdc14bc21003c7e7378a29001c9ac444d69335978fa76a7fa6","first_seen":"2026-03-04T09:22:28.64964Z","last_seen":"2026-06-17T23:31:32.776315Z","times_seen":12,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/bbd9372057c6546209d6645e8c1660a3.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/bbd9372057c6546209d6645e8c1660a3.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9L+l9HQoU8sl1nPJ24dD0PY0rIhTiucB5GG4jd4m56qJAfW+c5fo53fepNEYXX79kboxVPHqMTI=\r\nx-amz-request-id: ND7F1NQW806Z2C2M\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Tue, 18 Nov 2025 09:15:56 GMT\r\nETag: \"36faa02d023d57bb38cfdc5a9bc60707\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 19220\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36faa02d023d57bb38cfdc5a9bc60707","sha1":"f1b3c237a07cdbe9ab89623141613becb89677a6","sha256":"dfc6c450db806b159137d8d73eeeae74062cbcf935fd1b360b798990a3f56a00","sha512":"e5323ca9cd90faf26e1f1b1aabd0d1850b50440554e2f853dd11a31374d12f22387e6cc409983ca15023a438d955e4c326ed19e1befa73257deef320ce95397c","ssdeep":"384:VRXlFjk9AukWLTnZAcu5vgvmuBRliw6UOiuidt9In8M7QCwEC6R0bH0k/lzrSu7X:XXlFY9lLTacuZgvmu3livO/O8M7Ep6RS","tlshash":"e682d04726436c8779935feacf3b7659e12ceb83cd58c0a6617b86c43cc6093a9119c6","first_seen":"2026-03-04T09:22:28.615834Z","last_seen":"2026-04-29T23:30:42.194516Z","times_seen":10,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":720,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/vip/vip0.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/vip/vip0.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2084\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-824\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 09C7K6yrK_671y7r7PkKPWi0VELfkxxQH-tuSmnjZBjU3yAjfSizIA==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 47, 8-bit colormap, non-interlaced","md5":"f97d3a92a6f41ed2cb2de3c4e1bdbf11","sha1":"9db872300fc46c24f0566389fe51c35289905bfb","sha256":"0c59767174bd2f0f49683653c66b8a475fb7516f4fb34c43282d38b76eee91e3","sha512":"65298b26694ae3079cada04aa0d733ebbb0dc6b4a13744a1211596e6e852a32cbd383396b4e5e95afeccb4faa6da3fedbd13b03b224b282ab5d474d2d987f538","ssdeep":"","tlshash":"6e411af28c03ed1dcde45d71a0988e4edc6134b71f24c459947efd38361846daa79b14","first_seen":"2025-11-30T16:25:47.813579Z","last_seen":"2026-04-29T23:30:42.055692Z","times_seen":12,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getTemporaryData","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/getTemporaryData HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: tPbBDnAECwsLeLVw8Z08BUykGlM6q_IrJ_UAUCOOegKqDZ2ZXEMFdw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/icons/icon-180x180.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /icons/icon-180x180.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/group.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 18616\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:34:46 GMT\r\nlast-modified: Mon, 22 Dec 2025 03:18:39 GMT\r\naccept-ranges: bytes\r\netag: \"6948b88f-48b8\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xEJNxh6NpESjYA2BYELLLg4UVKjhBrdi4tfmTnoCHieZts4w3ew4fQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"586fabb92033e92749bc704949999dc3","sha1":"a19604f691a2927af7360084c0a07e492c55f5e4","sha256":"f87d191adf60efe2cac1a312358cb86a23b4cd2baeb22355c6967fcc1ac28bfa","sha512":"a3399fc02ce6c1b31d7f788dc541e446c69190e9606de7e49dc83a29d371a65781c8bc32531ac7b13b7baa97a17478a881a980b2393689dee54001a20b200b60","ssdeep":"384:gUNT5IxRVeWT/bzFMGfYruGZpGfScoh7pzGpnNChfl9DI1XGTiPAJ7ayvmAxAq:gUZ+/eWbdfYFHQScockhfbDBTiPAoEaq","tlshash":"6f82d10c2edbcf1c809b0b6715acd270ba900fdf097b90825a45f5f6a2b29e7d4e5507","first_seen":"2026-03-04T09:22:28.734545Z","last_seen":"2026-04-29T23:30:42.160641Z","times_seen":13,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120016.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120016.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UMlfcCCebWmSLj1J5Vm6DbcU3XVPU/AoBn8WSboxAInIWUiRZOilyC4O1dm31Un16vmdfeCd+Ovuc76vTbEvDXwV2cBqhNcd\r\nx-amz-request-id: ND7A9FXYBXQ60G1E\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:29 GMT\r\nETag: \"b9d9eac84715d22cea7e5e57d85b476b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 40827\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":40827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"b9d9eac84715d22cea7e5e57d85b476b","sha1":"521a18e1b35737991946e16076370c4e6164d366","sha256":"6df39616389d9a72560d08f58983a3e81a736d37c67412f415db9a5f8f6e6029","sha512":"317be4dc8a2928ca2b0f1b3c24ece7959add3c0c3eda564865b8c7a0a78beb3f71a830f81637d805cd46327a822782cea019e557f28040c1d740671846c1b5ec","ssdeep":"768:DhYUVRMn6PYYUVRMnq1CMwk1+UrEMfBNJieucsRmWsbuNQJPd:DvWvpCMwsEMf9huchphJPd","tlshash":"9503d06283458cf5f8d8527884e2e2bb8b00fe1d269723517cfe2d877b362e26d19751","first_seen":"2026-03-04T09:22:28.672002Z","last_seen":"2026-04-29T23:30:42.15318Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":999,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/tab/pg-off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/tab/pg-off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1405\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-57d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: u-upPAMq_ZVTA8m35PQwTJQlPO7Hp-vstQPUZyv2oMIylBLftlYxfg==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"925252ad8a9d4f7562ca1ff57ec60cca","sha1":"2bff46026ca0040298096278b8c49ac79a901785","sha256":"343ea5a78d690101f017ad0613961af4f0c6fc07401cc85f0ab3a96e0f845154","sha512":"e4938bb0b032a63e9defc64ad3fa6aa9826c5621b1175c43b6eaba5fc1c40c17f4212a8b9326c1b3853d9608bc0448731ca1b2fe0276e518472cd7a64007bf79","ssdeep":"","tlshash":"9c21b66034110635aafac90be70b5d421855067b2561d7aab1f1947a5f31833e2a5bcb","first_seen":"2025-11-30T16:25:47.768219Z","last_seen":"2026-04-29T23:30:42.167489Z","times_seen":12,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useGameStore.DXEnpbxE.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useGameStore.DXEnpbxE.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-1874\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: DTYk1XROhRSG-CVF1lb-bAsRx0xIMsOil0VIgvaV2rfxRjlzHpKvXQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6183)","md5":"4409d22f141c8e8aa33e5bf57fa12a92","sha1":"4a6cbcac971113ff907775f2419326bb3661ca9d","sha256":"88f9383d7713e71cc61831682a3dd58c73c16ac73ecb65d7bd3800d186811cf5","sha512":"8b4b95b14e27e6b374a6e8acb4b2e330c5294258f688d5d3e5b01b74233954a7f252f172ba0c3298de1ddc7adee4206e4617599cef476d72c30768f48b0376cf","ssdeep":"192:Ty7MuVj9n7CW0UjrvGsRhYyzeuutOA4dzAWbedWvp:Tqn2Q1eRs","tlshash":"c6d1854b4b48c87110fd0cab598596e1c21494a748449dd4bbf88af7de34d8fbad7732","first_seen":"2026-03-17T17:43:41.241076Z","last_seen":"2026-04-29T23:30:42.126634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/redEnvelopeRainInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/redEnvelopeRainInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"373b46a52d6041f7cf4b34306a875c56\",\"uid\":46001926,\"time\":1776958488016,\"rand_str\":\"c014594c635803c863f6b7bbb5e74bf2\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 228\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3p6w6E5N0iwyzA_zb-HwK7dQrCE3hWKOIU5upBDxtIIKeKCwg8iXQA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":228,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b36e49b13d6a00015e6e092974c09bbe","sha1":"78d1ce43a6da83431c82dbb622a27c30007eb21e","sha256":"49ca323dd47d29d46b02aa858984fe6016fc917c92af0d0ef757b2acbe05bfe4","sha512":"fa8add6d6dcfd78207de6f1f2c3d51179af4b0fc9a3e2132327dfb60b91e9c59f9e5eb1972f7afe0016049ae2f8a04611e9d27057a28a12529fcf48234e4108b","ssdeep":"","tlshash":"46d0125754280a68eb339261732e7bd99669c107be454dd4efcc2a1cc7d0874661cf37","first_seen":"2026-03-04T09:22:28.700541Z","last_seen":"2026-04-29T23:30:42.180685Z","times_seen":8,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useDepositStore.BjajlgA0.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useDepositStore.BjajlgA0.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-6bf\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ERcKaQyDw0XK_1MbOMHbyvDMt0QhaK1ej1FHS2ds17RJQvxS8JaO7Q==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1726)","md5":"1c2b85ff4921ca29024090b245074165","sha1":"580d749de4d4c1dbd97ebc25051aec45729f58e5","sha256":"55b2d8434de19b1b22926ab30a2337eebe3fa4e21ad3e62bfc47c84894ddf277","sha512":"7be273fd32522725b548c7fdb070cba321eb6072e99a2aa97c6e104e10c5ae31a5bbc3e8016fffc277fc8342fc11c0e588b30523d2e9a34c73a2653427f57313","ssdeep":"","tlshash":"353145cde2f481b209e7dfbc88759912fe20776c04d36a4097dd6a20375cd47a27ea24","first_seen":"2026-03-17T17:43:41.173569Z","last_seen":"2026-04-29T23:30:42.04623Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getNewFirstCharge","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/getNewFirstCharge HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"294e186dd693fae082dd2c32eed0c5f8\",\"uid\":46001926,\"time\":1776958488006,\"rand_str\":\"ed83c680edadd6cfc779a2aab3e84bfa\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 559\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: B2sefey3UVPXJYwBuWzRfoDiG4muaA9f5BRA9KUwxPcZxY_OM8GGJQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":559,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"25d6ff8171ade511c26aeddd61b629e1","sha1":"33e79d65b46b8a15a5f81150ba03735f36b4dbdc","sha256":"9e581ae1590c8b593c1a677f6a4e08860867f145038266500dac757d23fa70e0","sha512":"c2eb0c9c242f147ee14793d8bbf700b7b8e73f34877d9758242d7e48d4d242562cd4de158cdaa6e9637a02ce5db4fe88f3dd7de6c4948e77102473116da23728","ssdeep":"","tlshash":"14f05e1b502c5fd8ff4098c59983321987ee1a472e108e9804f9e72179fbbbe1360e22","first_seen":"2025-11-30T16:25:47.851226Z","last_seen":"2026-06-17T23:31:32.649587Z","times_seen":15,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/message/getHorsemanList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /message/getHorsemanList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"78b76af6f2072f88ceea50ba711860ed\",\"uid\":46001926,\"time\":1776958488119,\"rand_str\":\"805b32698fdea21b12a17be050370f0d\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: niV8WwAMCao5bB87CpxQcf2uQ-jJnKPSdPAfwyax-oPQDWu6LYusTQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16072,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f38319e96aa1863bff1889c8dfa4986","sha1":"7f822d6c02b2de11f060c6c8c60483bd1623ab5f","sha256":"bd1e354b127938e799995969b8604cb8dcacdf8e04b4827fbcb9a05425edcb6e","sha512":"9d1a87a8c544e01ef99587e46a22ccf14612f7237ef9249f1bd89446400d6be2cef07316b4d24e5985d279c4ec716349bb931a006e4d83cbe84cdb551dd5c308","ssdeep":"96:kj48Weh4/J8KdiGA2L6WzA980Jv26ppABTu26U7mU+eROWqx3E061UUMsG5P6Iyc:uuv741prJUa2RuerVuzK9iUo","tlshash":"817205d9d1f54e9bf49b7cadfef2e09d34572007145a1753be39e4a6e3a803811900ba","first_seen":"2026-04-23T15:35:15.368863Z","last_seen":"2026-04-23T15:35:15.368863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/4.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/4.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16612\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-40e4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: EjB_wq_ZafSi4Meq9-JTfmLTG6s-k9KyeM8IJx__YTgt3gvMZXip7w==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16612,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5b17958915dce06b15dc5acd1d757c91","sha1":"c0354e9d675040c4a0d643717f468f051fc6bbd1","sha256":"90671c0a7ce739cb0304b10ae0756fd015dbbb1eb1e72100eecae253db8c5325","sha512":"4ba716c2d2a7e4d494a60b6fecb6cda20b6ef3d3cf72a668e7ead721944b8f3e884f25ba75b4ad96a4d0cad466445e5c3025fe649ae55370a961b5193b391533","ssdeep":"384:Yb2ltPz3fxQN2mFDVz3hXRzibk+YHaZ9RTPTwnmi7BSahDBFXAHn:YboL5QQyD5hXsI+YHaZnTPTGmsRVBFQH","tlshash":"f772d1c59c5685129d036229ba0716e0563229fe4781fd3bcf9afc5ad8408fd9f4788f","first_seen":"2025-03-07T18:03:18.916738Z","last_seen":"2026-04-29T23:30:42.151273Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/DepositWheel-CMeiB-yK.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/DepositWheel-CMeiB-yK.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-3a1c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: JQ7z94bo0Dh-349QV_CXMhZFGucdD7Z7JmEGb5r0qTkyQQ9taGD8WQ==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14875)","md5":"11d7053afe6b8d931a0b09fb0891aa9b","sha1":"cb8e0442aedbe4bd642f4689269612645d1859a0","sha256":"5a40e3c53b80d45bcf375ab8d0a39ae816ce95ee39190f6bf9f08128bd384b8a","sha512":"f2bf810b6151160e47c4ae4ef079518efc90d0f1373d433ebb4edbb9948313b17474cb6d84d52934d684c118076989db482e4c1afd655be970ad2742965941b2","ssdeep":"96://xQmmmsPS8WKoAKa8Xy8hbppWWqwQVI55bmu0uXkOzGJQJubFRIX9EXVuv6FFih:x0i8/Gu2I0UoETlhPiaIX/bs6","tlshash":"b462977f798db055b97fd61178a06eca0010f2579102095fa573ba32ccc72b33bd46aa","first_seen":"2026-03-04T09:22:28.754989Z","last_seen":"2026-04-29T23:30:42.18481Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/DepositWheel.C3HxVH0l.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/DepositWheel.C3HxVH0l.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-5b7d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: AE3Eg_OT3WZKLpWEzo7DDehSxXPZjQ-EEyLf1TGnDxg0uXzhtSKa5A==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23334)","md5":"944e4004ff23909900d04d71f2441e10","sha1":"90c4be697819d58df4dd28bbbcb5c02ee2218c6f","sha256":"82de7d7a4e5a1e1aac2e22a079cd44d7f618d68a2d775e0431a1d7de63310d70","sha512":"43a1fc1dcc570a09b679ee0f5103af0af4855cdb3420a9272674d28ccef4695155d5272097afb4cb67b7e01e7514f7f4c8bcd73540d1734110edda3851314605","ssdeep":"384:HRbuIFmKoEaZ3LRSI2H+47ikYocaG0NM3ihpxQysACU56lV10c/pWNU6S3OQ/F2i:HRbH3oE+WH+47ikYo9G0NM3ihpxjCH51","tlshash":"5db22a14ba2d843c93b269d850e8006131363f4e9442b8d571fd5f6f936ec9a35daf3a","first_seen":"2026-03-17T17:43:41.226369Z","last_seen":"2026-04-29T23:30:42.164298Z","times_seen":8,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/inviteBox.webp","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/inviteBox.webp HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 93530\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:25 GMT\r\netag: \"69b6c9c4-16d5a\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: GoCC1cbyM2TvOmrCxO8E4afXQOwXJckMqQo3t1i-g0zHaeC3luFkTg==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ab157a477044742b750bdcc2eb25d9d","sha1":"f4d3ee21b32fc50dc28e5b10cbba192dad1cb9eb","sha256":"f9a5437eb989ca21aa5ff661779617c7cb61a45fb5206275caa33303b9338628","sha512":"49a31db3b7f3594b4f5660aa193cf9944d75b53b07931e8b1805ecaf5d2b01f2e2b6d28174a631cad60cd29aca89d336c5a5d84295ea0ddcf8d4abbd760ffa51","ssdeep":"1536:aH9pavftpsItMzZM15AJlWvB3OSJzXHsqULqL/BkZ5bRHUjbWo9kQ:adsNpswaZMcJlG3OS96fJNg1","tlshash":"a69312656398d92ceb99b8ff3306e1437e43498ee13702f397146bb54de84207e4ea91","first_seen":"2025-11-30T16:25:47.857998Z","last_seen":"2026-04-29T23:30:42.166707Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getGameList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/getGameList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 155\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"sign\":\"fa9c6d919a8d3f3c137c12b53bee5cc7\",\"uid\":46001926,\"time\":1776958488004,\"rand_str\":\"8cfafa0c5ce1d410663af27abda2e534\",\"lang\":\"en\",\"version\":\"1.0.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PcKGXDraIkx4GTw8Z3UHbY0fo6r3HgTEXIZKxTpDlEpwgZZgOrGFXA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":88744,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f390c3bc0edf25ff1b92cce5ceb7224","sha1":"44067f978f0cfb27744825210df50abf13af597c","sha256":"87f274ea16168954728a0d04008e4fc846fe1937af5aabcaf50fc5b2a0b4e098","sha512":"93750672df2df37f95039e9b4aeb8d677a3cd8883576dc9d3f6469fb53d8538b70f198c11781d7e09529a62973006b4464588361070da7575d8bf1f6ec4da0ff","ssdeep":"1536:2yFC7xnNou46JWkFZZpi0/3E77zEkqr7j6IMju+fjUYkTUdbV4qZsiYPBpta5Jha:BmFXHDCaPGMTa8wNUioeYNoacmdUu3HZ","tlshash":"3f83104e40f9dcec3bb137909b8ae448f45d81d7d9c8eaa546b8dd1452ad78f03ad20b","first_seen":"2026-03-28T21:45:10.664525Z","last_seen":"2026-04-29T23:30:42.186591Z","times_seen":5,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/GetHallActList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/GetHallActList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"0b035d8acb49139e5e7f70ef3baf02e0\",\"uid\":46001926,\"time\":1776958488512,\"rand_str\":\"62a269d150449b266be38460f1c76ee1\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 829\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Af57pPyrFfV-Kd5kVJmhvy2Tl4B3sL3DMTlSzL43wcBSexNjqsyWdQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":829,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3cb838ac62911e88ce2467c624dab899","sha1":"52e5c0504e140af044cd795e67dfc63479eef841","sha256":"66959066d449fefda7cd4aedfa9804e250a809c391ee3cc1d14d8b15a816a118","sha512":"6c3361e6497f40fe61f14e7aa9b6fbd341ecb3c453cb628365ac17d92b2b26f76a71c01ff72ad3d0e9f0c2fe3108f97493296bd99d108a05c284a7a58a5f7e23","ssdeep":"","tlshash":"3b015e0c9420fafe16d2e94128e70ebb51e0084abc7d1ef64bac79a400ae8f0c357749","first_seen":"2026-03-28T21:45:10.777518Z","last_seen":"2026-06-17T23:31:32.827766Z","times_seen":7,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/group.html","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T15:34:43.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /group.html HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:14 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-c87\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: AXG9qye21sZ8pKjdPrz5Jb9b-QOqEkozi_7Q0GcsPpQjOTMoStWr-A==\r\nage: 90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bce7a697c6a92aec254eacb074e1903e","sha1":"c65e06d696bd2a1ac55a210cf7c71f7f24495b36","sha256":"7b7414a55937f0e1fedbcd75cf2ad0bb1be7858c5c2b9b70b8e271af98587403","sha512":"94dfd21e5d083f961707030be7d610d163c902c51b2fd5af6274942e28f1b39b0a509afc317d2cb18b1e362744a8c7c4082312df44c002536b3b5d7f4eb6290c","ssdeep":"","tlshash":"8d61970d94be0c189326296efbe7b58eb526404b5c85cc10789c81745ff5ef8c8d74ab","first_seen":"2026-03-17T17:43:41.197609Z","last_seen":"2026-04-29T23:30:42.125987Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3665,"timings":{"blocked":1821,"dns":1322,"connect":1,"send":0,"wait":23,"receive":0,"ssl":496},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/9.C0ihX22C.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/9.C0ihX22C.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-b8f\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xAGQsGPb3LrMXNdDwrUlnaBw8zEBhNmGILKzf24fRzpZPptCNo10-w==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2958)","md5":"a5bed91311938e6aad27f544c0529b92","sha1":"ee7c1997797a857fc92bfc034c67b47c1cd9f2fd","sha256":"8d0cce6e2cf0db70a60a449a2169b1321dfa274276155a17039f573289486ec3","sha512":"a27c91e129f72f4a990966b3146177c5b196de385014aac39acae3126e9003cd608cb92bad6e38c0b1c1eacb654d96a868e28f154f90a4bfe103541d05614e0d","ssdeep":"","tlshash":"4e513b73992252600a67b8e0607f4cb89eefb1319e795163f17dd4d8e59702087af270","first_seen":"2025-11-30T16:25:47.843793Z","last_seen":"2026-04-29T23:30:42.021571Z","times_seen":15,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/user/v1/get_user","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /user/v1/get_user HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ghEyphmiMA9Fh6eBEPTKHez8qj_00LCaMjf2QL0eJXpukviRWGfdHQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pp-Cq6Tgue1.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/pp-Cq6Tgue1.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5371\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-14fb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: U8d2QxsLvkaYWj2RqRMcTkeUm3-k7uYEF1aHGwzI1dl6ZCPBAI7Q9w==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 27, 8-bit/color RGBA, non-interlaced","md5":"87d6eaa2e49d0d4cf4f230727e3ac1b2","sha1":"b4df0d10314b14a8ceed85b290f0d1a96312534a","sha256":"dce2e043c550109adce80256c4a66de8b0bcbe922aa3b84ec4795c7a7d894bfc","sha512":"03fcb2bfee67ea5ebdee0b48a05c9d03ff088dfc1876752f6ec654f565fd9b7453a5d3021e5d513f2a7f34f2353df09c01c86bc2336566ff680ba7b442119010","ssdeep":"96:yqJC7zQRhB8+BLe8bnKzMamPSjSlZj5DZ8TbhNd1dzcHtSHXJJx2DVj0eRTjp8RO:y0C7zSv9ZKvenJZ8Tx1qgHXJJx2BDRT/","tlshash":"1ab16c45563588ab8a79949031c703ec31b06a3cb8aea87f7138aa60f1265ce755c609","first_seen":"2025-11-30T16:25:47.836271Z","last_seen":"2026-06-17T23:31:32.817452Z","times_seen":14,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/9a3fc8573bcc0a984af9dfd8b5b1b141.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/9a3fc8573bcc0a984af9dfd8b5b1b141.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Bk8dY031/jgo655a3AHbpEVMLg+WsYv+ZHiIW2tDdO79402kyckijGKKf3rz/2R1ouzSG+5IGukgYWceZwKHytSGek6k5h88\r\nx-amz-request-id: ND73SQN91Q213GC0\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:24 GMT\r\nETag: \"b9283390716803f497c11a16a82a9664\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 13262\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9283390716803f497c11a16a82a9664","sha1":"7407e1a6403e83b19798c3536e6a53bddd309699","sha256":"51656000997dcfe3a1100a9d4b750ada005fce20f5ff0723599f3bcc34833c78","sha512":"cf9bbcb9f40dfc0adebf534cbaa670278dd4ca4697d1862182037e1681dc7bbf270fc1f2a43c6de24edea191b8eedf533fddbfe8e6ddd0e61e8ad55450d437a6","ssdeep":"192:DdLfTgAmaS4SD76RCJxmqHN8WPbWCbjZYUrH1PTN6CP/RCzVc6hoWdd:DdvxhS4SDmReh8t2YU1PTpCq6pdd","tlshash":"2252d09144c8ed81f5b66d511837e012aff08fe390d5bf0dcaa916df43410d58aa7173","first_seen":"2026-03-04T09:22:28.775559Z","last_seen":"2026-04-29T23:30:42.083274Z","times_seen":10,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":694,"dns":0,"connect":0,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/register-DhlR1D6p.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/register-DhlR1D6p.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/Home-Dr4fjUCe.css\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 30872\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-7898\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: -yKPFDhsbAsvZRYHJJiNnEGI1qsnXac-hyxnlvPd1SJFGjYLPkHrhQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 374 x 478, 8-bit colormap, non-interlaced","md5":"c4fd3035a2cc1c75dabdf333588c5cf7","sha1":"0a501d8b67f285cc0fa6c40b5df19fc895bd485a","sha256":"84c498cf0b46d7bf2b83092730fda73397f7a93c94f01e8e2494e560f0645230","sha512":"9978b63aa830e1cf22701f3f465e16f6172e1ad052815ca0b8e90be7c9a583e69861eca04b03b4be0615687ed778596041047714555927a0d4d46b97eb49e401","ssdeep":"768:93DPKMForOxiqmb8FFdAfGdFn7YfP6L6uYpr8PJCL:93/ab8jdAOFSP6iWk","tlshash":"d3d2e1ff676610ab57212f02fb9c95d50b234e8a44d776479a4872f3287bc5809ad0e3","first_seen":"2026-03-04T09:22:28.706427Z","last_seen":"2026-04-29T23:30:42.026477Z","times_seen":11,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useBonusStore.C-NW0A7r.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useBonusStore.C-NW0A7r.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-fb9\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: wqjKrcdX2KGB161jVeGpS5AbSiXosL9gzsy-BYyRGBTxq7LJGi69iQ==\r\nage: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4025,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4024)","md5":"74fbba8594c321c89e3d33296df25d3b","sha1":"5e387067ae2d464a0829839ac985876407cc4f24","sha256":"12b138b90cc3747288102269a2491bed62b3ba3898b47d833038dda922cf71ca","sha512":"eedfbb411e827629c51b4d1252312bd5b2bbc5436479b76c8c1a3860aa47eafbcc2f70d81d90656688be84207a9356f1ca4f7a5ef9bb3f2c0b7f9c422001853b","ssdeep":"","tlshash":"758141ee37ca08734469ee88a85d1a57c778775a50404169aecea718bf0cc57f8b2f21","first_seen":"2026-03-17T17:43:41.262434Z","last_seen":"2026-04-29T23:30:42.031996Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/user/v1/login","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /user/v1/login HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: cut835ZdZHVIL0uiEpmQwEI_yE5FXvp3VAb3fbth8OabRtxLpoIhxg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/deposit.QaJbcSWH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/deposit.QaJbcSWH.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 253\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-fd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: LyiJX08aCDbIPhoAmhl-EWNJIzx7AqQPrc8_8pFxItCVSX2E1D2Ykg==\r\nage: 85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"6708a634ffbcbb62e0eae57e6f0743b4","sha1":"76f8858e19e3f32e1595b5e5b8fbc125d5f39148","sha256":"27301cf0663b7dec5d7cae640dcec49d9417e6135371ed4a0a93f0834a940b10","sha512":"a2cfe8abb75a1cac148bf60444d7d22acc39d7b7e405f225f79c3a1c7d07975187f7905cf2f33e51b48bff584ac0f0ca66631eb74539ebdbbaab72352959c17b","ssdeep":"","tlshash":"23d0a56cb4e9c5f71145d5fe93540901ab65d76c7371c9c84d4447147526c8e211e654","first_seen":"2026-03-17T17:43:41.156317Z","last_seen":"2026-04-29T23:30:42.07447Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/src/static/home/pay_bg.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /src/static/home/pay_bg.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/Home-Dr4fjUCe.css\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-c87\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: n7wWyAQvHrYWTWnrKrXia4N8bGE6E6eNmE4RApDeDQa0WBZpKxOjbA==\r\nage: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bce7a697c6a92aec254eacb074e1903e","sha1":"c65e06d696bd2a1ac55a210cf7c71f7f24495b36","sha256":"7b7414a55937f0e1fedbcd75cf2ad0bb1be7858c5c2b9b70b8e271af98587403","sha512":"94dfd21e5d083f961707030be7d610d163c902c51b2fd5af6274942e28f1b39b0a509afc317d2cb18b1e362744a8c7c4082312df44c002536b3b5d7f4eb6290c","ssdeep":"","tlshash":"8d61970d94be0c189326296efbe7b58eb526404b5c85cc10789c81745ff5ef8c8d74ab","first_seen":"2026-03-17T17:43:41.197609Z","last_seen":"2026-04-29T23:30:42.125987Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/5902deb52c18d38fb639cdddf7caceba.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/5902deb52c18d38fb639cdddf7caceba.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +f0v50P7Ii21fDkvcd1rSP1IOQ6yVKczUHwk+Ai5MxLO4QMZxlN3g5X+wSg9QJLf/VPGzrvIlh5MRmroidv30GAvhikXRAmN\r\nx-amz-request-id: ND76MK6GW5JX2M9D\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 20:57:57 GMT\r\nETag: \"3bafb0d763cb0c6150244c278faa36db\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 62451\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":62451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x400, components 3","md5":"3bafb0d763cb0c6150244c278faa36db","sha1":"1caedf6c652358caaa4151944392eacd0d53a45a","sha256":"46c5e85333247b759c45a939c474fecbb4be762805156023a661a394122bb486","sha512":"97153bb8e42e798c4d94620a681ff6f1280b3887e3e23574758ac5a4a20d644ca680a7412021ad6b61245ba728c5d7c7fb260c32d5fb11f263ee68564f79e419","ssdeep":"768:Ch+Y5wCHPEJqKW3vDVx5kH9CcB8XBfSPSokIptqDMLOGpHtmDx+fWAeYINThpW7m:cwCvEQD3OdR8hySnqFKwN+M3q9hAp9qN","tlshash":"cb53f1adb3553a0aacc821f62662ce7408632092cb7fc1878249f8377655ae53ed57c7","first_seen":"2026-03-04T09:22:28.654896Z","last_seen":"2026-04-29T23:30:42.168298Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":907,"dns":0,"connect":0,"send":0,"wait":178,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/cfced94d34ed51d05c218cef158c09dd.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/cfced94d34ed51d05c218cef158c09dd.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QzrPCtKmU8gGWDPXo6y3fs6uzwRyp2s1sBevwN2N7CkL8A63fIykZ86DKfC6ZQ+bYg9X1Txrl9v0bhvLjGn+iUeJ30v8QLD4\r\nx-amz-request-id: ND75D63MH11D1A5M\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 20:57:56 GMT\r\nETag: \"31741ce3265474b102bf9cf44cefc5c9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 47537\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47537,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"31741ce3265474b102bf9cf44cefc5c9","sha1":"8a72d5b89349151d482f73351926110399173af5","sha256":"9f98a022e682b381f6e46f3d52a5bc9850db04ba9160225cbd51fd8f68ce53be","sha512":"323070591d5a228e9ff477a05b51df39aa221c579783d6ca050a67d739a687ac72f75204a51ed4762977024ba62201642e85db9cbba69f9d976482e79976c8a7","ssdeep":"768:lBYZS1EH+SryPkYZS1EH+Srz1mkCegIboclHCDLcpM9mKtlpFXnUYFZ832KLh1aE:+S1EeamS1EeaJmkC1clHALCOtFUqq3Vn","tlshash":"3223cf687a815c63f4c05976c9a7db7393196e904a77964330debc033bb2782dc2cb96","first_seen":"2026-03-04T09:22:28.702725Z","last_seen":"2026-04-29T23:30:42.149465Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":870,"dns":0,"connect":0,"send":0,"wait":175,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/user/v1/get_user","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /user/v1/get_user HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"23df5d667da1be7a02b15c76570b3e8b\",\"uid\":46001926,\"time\":1776958488027,\"rand_str\":\"b927bb091c570df0334dcb9334173d25\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 716\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 4i-SxnJgAcW6QTYtp0kbZKC_-4qMPlGlAZPbaSQ65Onv9yTheW2-zw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":716,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"112aacbb0b7c90417706f9d0b04d3659","sha1":"ac37b610d78c6ecccf391675fd01fd039a9d5313","sha256":"45c61370154c63fda7785e77a36a84675913e589175b1154fe6bca5b7ebfceec","sha512":"6d2f8c1d54779d6eaacd660f24a7c4351d3be05b51c6a506a2d8ca9ee5fd2311c8415864326817253ab2964ab185f3b18db29c4706013db03fa632983667f729","ssdeep":"","tlshash":"fa0115150175c0a4aec5b5c03413494104cc31648d65ed14eadcee0cc9f4984771553b","first_seen":"2026-04-23T15:35:15.377556Z","last_seen":"2026-04-23T15:35:15.377556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/usdt-DvAcNqdk.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/usdt-DvAcNqdk.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2968\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-b98\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fEpeFSVi8CT5bMm8V-iuzyTtPv18HM25h6zH60Z1U2ZUMObbeg2h7A==\r\nage: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 30, 8-bit/color RGBA, non-interlaced","md5":"30c3b58a8f54d48ff14637d0550d7481","sha1":"045bc9097afd8c1798cbf39251732a5d3034a0f4","sha256":"f602cbc3e960fa3b26a2f7a5d08df19e446ba998632e86f50468a1c55c79db92","sha512":"05de0ca9088e2f6068cba6a4e7db1bf2efd9d30f035a7aa154a5a97ec0dd6467eae7578eb526d5db4f939813f99797a6e61cf54bb180547f3f8faa8528aeabe8","ssdeep":"","tlshash":"36511ce9458c1221d0fdc61b1a0e7de68cc05fc189e350bee99a086b2bade56c854a27","first_seen":"2025-11-30T16:25:47.775957Z","last_seen":"2026-06-17T23:31:32.70678Z","times_seen":14,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120136.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120136.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 222uHc96I9yIC2Cxqz/3d5lk0QFEtJ0kAxBkL5QpitkG4hYRWE5rfHXEP3KWxVONdyw3PjJtBeM=\r\nx-amz-request-id: ND71212TJBN3BWPS\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:46 GMT\r\nETag: \"ba1334bb6fbf04ebc6f2e1e4a0d99823\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 81415\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":81415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x400, components 3","md5":"ba1334bb6fbf04ebc6f2e1e4a0d99823","sha1":"617f773afc70c1dacc22b453e91b424367587c28","sha256":"95e8ffc3b8d472e13a0589e19250269cb0e8db04ee51ce11866b4ed6de26d17b","sha512":"6cf79da8d5b96c79d012aa1455ba9eaa785c5e5cdaeffc9e374d4357ee3784bb7934125a62fde36eb1240c7cc60489ae9ba1b451ab6a89a37ec4968a1371ce91","ssdeep":"1536:Ud6as6qX/9KqAjP6gv99kM0qDQS889EZIxnlYuF5cGZztt3:x9XFKqAjhv99tLsS36Gd","tlshash":"978302d54bf2bd42339bab52d0c9c222e2065d7ced9b7fd15870128da0b067fa0764da","first_seen":"2026-03-04T09:22:28.646474Z","last_seen":"2026-04-29T23:30:42.104897Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":1179,"dns":0,"connect":0,"send":0,"wait":172,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/8e6d3773d63a937465b308dcbad18161.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/8e6d3773d63a937465b308dcbad18161.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8g30q/snaQyFfkwIfdRWaYJd1I38/yzADVwonI80xRHiWDNkWY3cesrKaSNRcY7UJBG/Xy4ZvxQ=\r\nx-amz-request-id: 5B34RGG4PV5NFVWJ\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:22 GMT\r\nETag: \"8e3a357dcb768a0d69bc21f5edc91299\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 11468\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":11468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e3a357dcb768a0d69bc21f5edc91299","sha1":"44b68387c01338cbaa6ea2ea586663844f27921d","sha256":"86a9c5fbcf6614cd0e56bbc04b9494efc3a5ed70ea25bebd96f1cd076aa08b79","sha512":"b985124dd794bff97a6250cc8f63172178f7bdb4b0964da7aad89cf4324480440da780c668279d138bab6f9fc5c59282ab0b051f04e74bfde244e9511a006460","ssdeep":"192:+1l/GJK/EtUNRyPLkZhx0GqgYDlEOkn5dzsZQAiHSW3tUgr6bd5jV:QJEK/9qLkiQ+In5dzMlfZ5jV","tlshash":"7532d0b6bbaf12077f7a162426a44f0548e5b5f1d11009e3d20e88dc72edae3a867821","first_seen":"2025-11-30T16:25:47.797246Z","last_seen":"2026-04-29T23:30:42.117751Z","times_seen":11,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/e96b90dab7d16fba92f62595854c48e6.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/e96b90dab7d16fba92f62595854c48e6.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OXlyXI9CwRmj4HUdtAGdbwzv3mg13d+fL8YqfLuE2ablx4p60voS3qu0KLzzvr1HtygOBZAt1zQtHzsh9R8lVQckdPpg4bo8\r\nx-amz-request-id: ND71TGHY461V3HA3\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:00:12 GMT\r\nETag: \"cace7fc4b5ee1cc46488cd9b7d25fd70\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 10514\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10514,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"cace7fc4b5ee1cc46488cd9b7d25fd70","sha1":"d57e008944d313003b7a856d459bc84a6995894e","sha256":"9d7ab71ffac0c146319dab17d3afb9669e4cbaedbf994f39df6175eb24e70830","sha512":"8363b3d317aad746656ad6473b86cb1a75c30042b513cfa9c70ba71c61135ea10976b16018dc8210b48a9b991d868b6c569918a28f62ecd24e6308b1aec643e4","ssdeep":"192:3Vx10wAZZddSAEBfuSsYbGL3eVznzEl6yRZtdNDB6A7pDX:350wAIPuxYbGzeVcPP3NVL7dX","tlshash":"b722a0506d874346fe510fb126527978bc754ffc46ae459dc782a4213ec378ad821960","first_seen":"2026-03-04T09:22:28.760468Z","last_seen":"2026-04-29T23:30:42.134435Z","times_seen":11,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/constant.C5_EDeO_.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/constant.C5_EDeO_.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 388\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: \"69b6c9c4-184\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: AgowP-Ep9gcBpLjInb-qk304L6epGRZlqzcYgjsokWpcmI_Yk1-sfQ==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (387)","md5":"98fd658f7451fae68930b90e71278ad8","sha1":"38ae6e3a76511ec530caeeb98f88b45de2bda8b7","sha256":"2251fc773b1f8fb795ec53776b59c7cf265c2585fa445d5ac8cd155baf92ce97","sha512":"eeabc203bbe6f10721be844046785fff6fa26f45a478139232e8b5aa507ba1f3d547f1aacf3f20eb1ab7bf0448622cfc30232a9a140e6b444b85349962605e74","ssdeep":"","tlshash":"92e0d826978e50f1c936ff0122caa556aba1155264be0aa01698ff800389481e3ddf9d","first_seen":"2026-03-04T09:22:28.72857Z","last_seen":"2026-04-29T23:30:42.049107Z","times_seen":14,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/WithdrawUnlock.BjgYUAU5.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/WithdrawUnlock.BjgYUAU5.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-851\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 8zHildQAeC-LJvAOjx7EAckMhspZ_2AXQ-WCDsE4rIRrFzqtH1huag==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2129,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2113)","md5":"dcb961b2d194d3f8cb09809133b5329c","sha1":"80f5bd62c0c1f4554a2634e9b604a42289b7baab","sha256":"bf018a5f42b646d726d53a1bc2d268628e5c40c7d2086eac144ab412fc447f41","sha512":"7796066b8dee99665fdd6f4930e1553e25eb0b36146de1b9c42c1ef32f62f5254e7a9222d40e9a3e8515b5f33772c54777d3589374767bee0175385cc3101704","ssdeep":"","tlshash":"ae41714eb60bc23c8a61baac56954c14316d4fe9e174985230bded804fe2cb8a71db38","first_seen":"2026-03-17T17:43:41.151873Z","last_seen":"2026-04-29T23:30:42.108514Z","times_seen":8,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useGameStore.DXEnpbxE.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useGameStore.DXEnpbxE.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-1874\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Y66IqeE6fCDM-y8BqGS7f7JuoRNlC11_G424f2aL1D6RXyq9YsDLTA==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6183)","md5":"4409d22f141c8e8aa33e5bf57fa12a92","sha1":"4a6cbcac971113ff907775f2419326bb3661ca9d","sha256":"88f9383d7713e71cc61831682a3dd58c73c16ac73ecb65d7bd3800d186811cf5","sha512":"8b4b95b14e27e6b374a6e8acb4b2e330c5294258f688d5d3e5b01b74233954a7f252f172ba0c3298de1ddc7adee4206e4617599cef476d72c30768f48b0376cf","ssdeep":"192:Ty7MuVj9n7CW0UjrvGsRhYyzeuutOA4dzAWbedWvp:Tqn2Q1eRs","tlshash":"c6d1854b4b48c87110fd0cab598596e1c21494a748449dd4bbf88af7de34d8fbad7732","first_seen":"2026-03-17T17:43:41.241076Z","last_seen":"2026-04-29T23:30:42.126634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/bonusRain-BNIXTZP-.webp","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/bonusRain-BNIXTZP-.webp HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 64146\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-fa92\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: m_2EJPk98pllf_IDAkEsUfslJtas8km_SMiiDLMIgYxV4d59jaVz4A==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3093900bded7c38d77b976a4ece584a9","sha1":"27cb85b55af78024a5519db4cb020ca46a33543c","sha256":"6b4b6fe1100b6736413c013973d94d58d6fe3fad0f29f16f54deb8046a40ed58","sha512":"7ce86d9e14c2614df2f330115daf635ff6323bef542668be8dca94aefd2cdc397ac033aa94b523d3864c9652ff00950c7435c6d8ea013da9887d15a597bc4d7a","ssdeep":"1536:Qp6QPq/PIhn9b9HgRGyxKmbSaylQyMLv7qoW:qhnHolIij79W","tlshash":"1353f1599e3a85fcc9bc057ec2b538b3f9e720d0913399636d12785b71f1d9f4602226","first_seen":"2025-11-30T16:25:47.833346Z","last_seen":"2026-04-29T23:30:42.092073Z","times_seen":12,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/tab/home-on.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/tab/home-on.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 528\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-210\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 4Kz-PEN2FJmEAihEX1t30a6wi3AhXnDD_rJON1h7_Dh4Q7oevyatzA==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 29 x 50, 8-bit/color RGBA, non-interlaced","md5":"684f8da309c8d0c9a122d893bc4a8d98","sha1":"ebad9655e27d4c5d9862ed234ef417d6539ca827","sha256":"f575c539dc2f859fcfcd6b14ec9e936da48bf7ed874ec35f9d7305c4ee544542","sha512":"28cf25439f4e0fd4eb3313744110d7b7c89556a9910a9e4765587cd16b570f37d965ae8bf4f0c5b20909ba7f08596071f2659b21b9df7088fbd84a72f0077e92","ssdeep":"","tlshash":"acf02655b53127177451d71361de07f041b9a95704785c341d9270615170e3509c44d5","first_seen":"2025-11-30T16:25:47.824302Z","last_seen":"2026-04-29T23:30:42.135974Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-index-index.ClxU0WMF.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/pages-index-index.ClxU0WMF.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/index-Ccu6oc9r.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:20 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-7b4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: VbTmsJ2ykk4GCXqzGjmj_Ln0V5BXw9tHy_07j6-h6Uwz2RySZooWIA==\r\nage: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1972,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1971)","md5":"6e53ffe899652d64e7238533724980b5","sha1":"14047ee5889d5a44ab0b5422a05022941018daee","sha256":"30104b78078deaeead0f3b167a797394904b0c81539dd20f2981d92b8c66da93","sha512":"475ba200ce2beaa9908088059bba31308463545295a75e1037d5896fc0a7695057f6e20a6c7ee6ee40c67903c2a1b150763466b06352731aa4127c1b7339a9ae","ssdeep":"","tlshash":"8141a83c935f9574054614cd267a1078e039ab282c76ccd17b1f06212dec5dba0debb8","first_seen":"2026-03-17T17:43:41.207032Z","last_seen":"2026-04-29T23:30:42.029059Z","times_seen":8,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/ProgressBar-CKZE8lVf.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/ProgressBar-CKZE8lVf.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-1d39\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 8-Kw50ZsquG3grtjWwV62lO6i9Z1NyU_iBN3p0-zStd6ipx6uTJUPg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7480)","md5":"b9749ae5408b00d8e9c455ef256f4248","sha1":"9f7a3df6d112e4eb876a1b4a6c59d38af11827b3","sha256":"60c54463cc545b1a374891a693a0e89ffa5158514d77d646a52921ebb6fadaf0","sha512":"68311283c6e7d1e0d5e38808e91d6f006522a251440a0ae6856e1b9c9eb479bd086612d3ca8c748c69afbdb9f6cc180528546c51347979474e4ce67fe5c029fa","ssdeep":"96:Ex46JYoVpXopxvC01hnoW3aB+qXLDeJQv1ywmqCm:MVpXobv93QmJQvIw/Cm","tlshash":"8df1c05e791d244578bbc69194b067d8130076df8326d179a8f32b31acb72da2f34e8c","first_seen":"2026-03-04T09:22:28.729805Z","last_seen":"2026-04-29T23:30:42.163409Z","times_seen":14,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: OLrzJnYa5diwYaLcG-xqKiilv_cG7gQ1Fyth1NIC1nCYWVn1cHzL7Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/a67faa16b87af0ea355e6a623adced7c.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/a67faa16b87af0ea355e6a623adced7c.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6+YhhgvzoEPaRRMhYEqb55G4XMPNtcY6nqoNBrRijySgyPjxaayyfOPFVwKUkNcVh1BKDG9gJp6g9LTieM7tAaPFc98qgJ1I\r\nx-amz-request-id: 5B36RWX1RC45B97W\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:04:25 GMT\r\nETag: \"201d9439bf0cc640927577936006b567\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 14221\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":14221,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"201d9439bf0cc640927577936006b567","sha1":"89cd0fd9edeccca82622e6ff61cbdb52dbcd0f7e","sha256":"f0f43d935207969ec79015cb074068b60deb4a08b48cc2eeee31bf9e82b3843d","sha512":"8ffb20c37fc459360d8948bcef5abf9236d0c6eda5c3dbc615e47d4d98405427fdec579ecd8da320da1f2a5e9f7b28588374d7b6701d3612c3e3b25faaf91f43","ssdeep":"384:hYNg7sPBXqL4X0n7uCd+KeantwHsnVC9Vz:hYyQPML17u0twOCrz","tlshash":"f852d0fcec1d6514f825d77c45f932a9e207729c83e2e2d83244f306a8029899d8e27f","first_seen":"2026-03-04T09:22:28.633809Z","last_seen":"2026-04-29T23:30:42.159743Z","times_seen":11,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useVipStore.BlOc-6Js.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useVipStore.BlOc-6Js.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-4b0\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: T6klJcsoi3wxbKuCu3itIh5ohRZmjbcwlG6qInDF8hehutqOAxkiXQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1200,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1199)","md5":"6ffe33c40c5fe1accee0eddb6a150d2d","sha1":"c80938d6b1a6b854da4fa5db140f20966c5b4214","sha256":"0bc2412c5675c146ab2cbe90c9c448ee9e749172d21fea6dd311adea13b8984f","sha512":"84de130d2936add3be6bd726b3d67517e76afcf01ed4e67ef4e428dfc0c1d8629eb0c27629b8840af2c93a7b4aa193c91beee8a50495e96c7c8ce977a2e89505","ssdeep":"","tlshash":"6421e26f1aca54f7459da9cdc0196101e798ba46e06820999f9f2f11290cc43f1a3f10","first_seen":"2026-03-17T17:43:41.158197Z","last_seen":"2026-04-29T23:30:42.120197Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getMyTurntableV2","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/getMyTurntableV2 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"bda6282b3560b20d772a1320042d37b3\",\"uid\":46001926,\"time\":1776958488017,\"rand_str\":\"7ae9608d601d424def790b7c87268ee8\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 113\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: izUhrBTUj5uO3WEZ6VaACO9gd_5914UwEIm18KSzWXoBbBmC5XEdug==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4f5b061d1ce78ff06dfd65a060c1e71d","sha1":"c21c4e24b4c7f95df7a055637490924fcbf4b3f6","sha256":"c8b98ebe46017084b0b65a36f6cf9cbb544b66265fcf7699987296049ba44f7f","sha512":"f3fee8811093f5516655575efc999ba1d33f6c35d788b522eca37c8d342b03cf26f02b22071adc87dbdb79d3c699ee1bb83e59c66af8a144e663b5a75b58d529","ssdeep":"","tlshash":"3cb01200606818f85a564988a35935638b2d2445bd220a614f6c79189b548e451ab73d","first_seen":"2026-03-04T09:22:28.703548Z","last_seen":"2026-04-29T23:30:42.155033Z","times_seen":11,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/7f52852273a8945d71bdfcebfa189639.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/7f52852273a8945d71bdfcebfa189639.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 80dr136a62TOu0iTKIRtva/5xlucQhCk+AsL3ZtAF+aiYvNCvFgOOK8YiNPPfzCT3gVCvSoF2+/pZBvgrZQC9Bfd1J9BEjK4\r\nx-amz-request-id: 5B38C1CPGXXGGN0W\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:05:47 GMT\r\nETag: \"5848a55865aac9c82cbad2852a94e85c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 13751\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13751,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"5848a55865aac9c82cbad2852a94e85c","sha1":"8dda0373577a3da8b3edafc9aaa4f7d8040ef987","sha256":"5fd5a084e1bf3893cd5e47b90695a307d71428bfe67712c28ccc4e4cdec87882","sha512":"af3678bf8d66d07898920253e27f661f03212f016571199ce57c0e8e56b94381f8de00ce461031bf5b1830003a10bf2a478bb2b2136ffc0e4ee55c15103ecdf4","ssdeep":"192:hYNMtKw11huxjyrO0bJLdtNrRViYwNRPFFHNYIckprnRRlpHq02Uw3lucb30:hYNg71O99yLB1ViYeRPF0oTRv552UsrE","tlshash":"2d52b0c49fa540a5efedc772dba07be09bd31e2cf3512d4352d9b52908461915b8e08f","first_seen":"2026-03-04T09:22:28.61729Z","last_seen":"2026-04-29T23:30:42.071541Z","times_seen":11,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":475,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/getGameConfig?channel_id=10023\u0026client_version=1.0.0\u0026hot_version=1.0.0\u0026bundle_name=com.sanp.game\u0026os_type=3","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/getGameConfig?channel_id=10023\u0026client_version=1.0.0\u0026hot_version=1.0.0\u0026bundle_name=com.sanp.game\u0026os_type=3 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:46 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fOcJezRsN23kD50_82VrmzGQP2QkDmp0pbfywvZgQtcnh7jqM_d60g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":127,"dns":27,"connect":3,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/turntable_get.gif","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/turntable_get.gif HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 933051\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-e3cbb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 3D5K6zl1-kEc09G716x9yxhBISGA0RJenJ2Npsbx6tvAYkVH7Kn5qQ==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":933051,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 151 x 77","md5":"61ce536a71e873d9efaaa16a835c1f35","sha1":"11d8c1bfd79fd256214825110151f79771fab714","sha256":"65425ae823770d80341ba3aa768cb7bb5929671291456002579e39cc2d3bab67","sha512":"ff40211db18d5a4de92433f2a24666867b5ad6358c1d7044dc415b217495308fc13e6da90fda51ae3b3103b69aba6e3d861478407d5cded2d54512ac9b850159","ssdeep":"24576:y32SeXNOjek6k7Yje2hMuCIam2sR4fHUF79ahEKf4:y3wyuk7YS2hMcLCfC7t","tlshash":"54152323e225c46b703334f43d2b05db851a4ce9b1aca827bd8971d1e8f605e49b977b","first_seen":"2026-03-04T09:22:28.698654Z","last_seen":"2026-04-29T23:30:42.178977Z","times_seen":11,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/ca-Cymtxf-_.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/ca-Cymtxf-_.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4040\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-fc8\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fvv8giDiXqFHvxnVW9IYTowlhIhfIbf42jsMdcPHBjOEFheKPT_2Bw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 31, 8-bit/color RGBA, non-interlaced","md5":"782aef50b919d0281dc15901e475c1bd","sha1":"cac2cd6029b7eb42b8f37da6e348b2a174730d68","sha256":"f268464776efb44130694e3599d728c4b7fb804b486b71ed2f0675089355e8fb","sha512":"512e4695834be72546ce1ba2a453d5555cc7e02496d1163a483c22eca4bf05099e9a1463a90e8e0c6d02e299800bdef8b416664f1106df51faa096f2b1ee8232","ssdeep":"","tlshash":"3f812b488fed4865dd06e845b21c6050ac70e198de47e49e8083efa9877f794ad3f1c2","first_seen":"2025-11-30T16:25:47.879254Z","last_seen":"2026-06-17T23:31:32.790419Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getBetList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/getBetList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:49 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FJB8bWgbq8VK00fkl-XHdomFKef8PLd_wwgtHOWO5LNUFzfdyK4CgQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/mall/getProductsList?uid=46001926\u0026version=1.0.0","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /mall/getProductsList?uid=46001926\u0026version=1.0.0 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rbL3M-nzIV4FlmsCcQTCWG7IJdZzCf3ijt7bgUHyloLxbL69BxYdRQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/getMyTurntableV2","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/getMyTurntableV2 HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jE7gi_STWPclMu0sF2eVU_BqL9z_MLTMsIp0pVfFQoyjoZL0h0xu4g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/g_pay-BueYp8Iz.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/g_pay-BueYp8Iz.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4760\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-1298\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xRJgQGYmgpZuEP977i6ia2eclouSs74syZ_p7fRmH3goDONMRUsaDg==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 32, 8-bit/color RGBA, non-interlaced","md5":"c1102043fed6334747b46048bce4c5e8","sha1":"903973fca644c9e5cf972c8b7e33928374763b5e","sha256":"d6596dd4b8276b6c760cccc56109b72377cfda32ff4296d717f42b1fdba69c0b","sha512":"0af8864656421b50ed1fcf3be6fdd0057624a22e7cfb670d8eb0e3bbf667211d12e4495f793df44c77f04a3801297e683d73519bce8a13bb0c9fda636f86c16a","ssdeep":"96:lcFctq5B8mdILc4FQ73YnqZs4sIDpPDEIYy3tAKhLuVN:SFUyB5S1FQ731Z9sIDpPDuy9huVN","tlshash":"8ea18d9f52cf348eaacb84397324a56cc9a4d101d04ba64629d97deeaf5e040361d2f3","first_seen":"2025-11-30T16:25:47.801401Z","last_seen":"2026-06-17T23:31:32.637033Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/da9502883ec27697a5c96be9e07f8eef.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/da9502883ec27697a5c96be9e07f8eef.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uPbPiwybAu+S4tl1EA8j/Y8Vbp8aRdF1sDTzkNF6cpk4cIMnmFOz6sdnALmKZ7ymvjppU7kwUevU2pxcApT6G/aP8Ys1QR8M\r\nx-amz-request-id: 5B3A3R5H45WDR5DM\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:01:17 GMT\r\nETag: \"55d38c2911d5ec50c0d9698f70552c07\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 10864\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10864,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"55d38c2911d5ec50c0d9698f70552c07","sha1":"5c4207e071af8561d164991781bfcd51323ac132","sha256":"8c1c30ac14bdcb08d892e4d9675ce3b30208ef671ea74284fdd54eb3f313849f","sha512":"1957623d2888adead5ac49e972b9c7fa1a55ee5bfd0378f181e8639b06da6823c51ff3c9a806cdd11fd342d298fa3d4c7d31737bf3514fd4ae231e2f500d2808","ssdeep":"192:WVWBQ6OWwVHBXyCC2xrShkjX0fXv4VcdGGgSr+TeUaFGIzOePR:Wr6fgXXC2xrSKjX2AArBUaF1zOeJ","tlshash":"f322b090e891a572f8817f3ae0c8ff5dafaa34929760d1ec68d12505def80445cad35c","first_seen":"2026-03-04T09:22:28.645273Z","last_seen":"2026-04-29T23:30:42.199784Z","times_seen":10,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/favicon.ico","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/group.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-c87\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: hwnoSvYWJPAdlwqwP6VKGm_0pch7acIWH0WqHRpnONUK42-KSpQ3KQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"bce7a697c6a92aec254eacb074e1903e","sha1":"c65e06d696bd2a1ac55a210cf7c71f7f24495b36","sha256":"7b7414a55937f0e1fedbcd75cf2ad0bb1be7858c5c2b9b70b8e271af98587403","sha512":"94dfd21e5d083f961707030be7d610d163c902c51b2fd5af6274942e28f1b39b0a509afc317d2cb18b1e362744a8c7c4082312df44c002536b3b5d7f4eb6290c","ssdeep":"","tlshash":"8d61970d94be0c189326296efbe7b58eb526404b5c85cc10789c81745ff5ef8c8d74ab","first_seen":"2026-03-17T17:43:41.197609Z","last_seen":"2026-04-29T23:30:42.125987Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/deposit.QaJbcSWH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/deposit.QaJbcSWH.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 253\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-fd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: o7s9EJiXFLS503CGodOl1xbz3I7yFvAGP5QnfjlgqjuNSGnElYK-IQ==\r\nage: 84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":253,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"6708a634ffbcbb62e0eae57e6f0743b4","sha1":"76f8858e19e3f32e1595b5e5b8fbc125d5f39148","sha256":"27301cf0663b7dec5d7cae640dcec49d9417e6135371ed4a0a93f0834a940b10","sha512":"a2cfe8abb75a1cac148bf60444d7d22acc39d7b7e405f225f79c3a1c7d07975187f7905cf2f33e51b48bff584ac0f0ca66631eb74539ebdbbaab72352959c17b","ssdeep":"","tlshash":"23d0a56cb4e9c5f71145d5fe93540901ab65d76c7371c9c84d4447147526c8e211e654","first_seen":"2026-03-17T17:43:41.156317Z","last_seen":"2026-04-29T23:30:42.07447Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/newbieBonus","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/newbieBonus HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: dso8qm2MTAVAu6S2YEBOLbXk_0HhrMb4GQ49m9M7TeQWi1Oe81SI5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/home.gGo2YeXb.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/home.gGo2YeXb.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 491\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-1eb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: BwUw2QckwwbGz41w_BD_HIG2UnmhtAHvQ0fDFfmsH6QW172RWnEUzA==\r\nage: 85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":491,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (490)","md5":"7878665219ee2a70184a02db0afcfc8d","sha1":"de123facc2ddc76de0605bccddeece372c6f1adb","sha256":"250e109a00bff8dde45a8c4f5a8908741c912d280533fd3f01c6ae61af6517da","sha512":"59c757fffab0db51151d11383067c5fc2725d18609c8d3a5efcc5a16fc483cfcf69f589c4d1abfc6f5bc1d04f7e3293a181d61f23649b795227dc7b77c712b7b","ssdeep":"","tlshash":"1af02e6db4dcc97332577b8f9218eb403ea4e3ba503449dc4c8c27209b66cec702995c","first_seen":"2026-03-17T17:43:41.224418Z","last_seen":"2026-04-29T23:30:42.045355Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/home_on.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/home_on.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1187\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-4a3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: OwrHXXfsrpryU1DZnPcLQfERRU5Wy_9SIeI3KmgG5TIz5b-kwlUe7Q==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"a6790f9a8583aca3a2111a4c21db9b13","sha1":"3ecd61e3345329156b68bcd596142f92667af326","sha256":"1030d567558ae25b3ddd1d838d22176692f39c3664a8aca0db1daa0322d37c42","sha512":"c3cc22027eec02650591b0daa7589f5d3a56ff5028ebb5602baf4559a11f48ffb1ad5d78ee13f24ca236128f738dd6f358101fdde474b852496c97f8318e1015","ssdeep":"","tlshash":"e721b49218a59dd1b86f1b04224a280f6d7691de48629a2275636a2e4c903ac8861bb3","first_seen":"2025-11-30T16:25:47.858842Z","last_seen":"2026-04-29T23:30:42.051338Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120100.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120100.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rjUT5DaqVl8X3A4chg9wABYrlEdXh5xV8YJeeNeDqyDeVALxHj6hWtawaY9JeLyFObc4EITL3titqaQCxRYWnX2MdhUc/VRM\r\nx-amz-request-id: ND777D74X9AAQSFB\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:38 GMT\r\nETag: \"3125f5cd314b6c58fb10d1140573c1c3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 54091\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":54091,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"3125f5cd314b6c58fb10d1140573c1c3","sha1":"73cea5e53e1ed63d80c50a736374b1bb59d27844","sha256":"f7bfc240df716a8469464f209977d9bfaecf2c4ac4bd230a62483c0475746f7d","sha512":"8cb4b211d23200fa99e5a2c11dfce42621dfea334f1b0ea6ff6c873445895579e19dd0309238d280192724e8b39ac2bf8cd70e22c6b5e53fcd68d013006fdeee","ssdeep":"768:6U0kuR6cdPw0kuR6cX+pJ4K6pVSEDuF2PRovx7i8/SFAoEvWLqH/gtq13Jzy:dBw6cCBw6cXWGp9INvx7vhnkqH/pVM","tlshash":"0533d028ab42ed33f6d307bc81f6e79726265ca81dd7a762795e60513f352e1282c313","first_seen":"2026-03-28T21:45:10.871572Z","last_seen":"2026-04-29T23:30:42.097993Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":171,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/useMailStore.Is4DhXSq.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/useMailStore.Is4DhXSq.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-b43\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: XtEctWFwlO_nZ-SA15hvyJdecbShG_2QjvL_ZfIPXfaHLYqyDIi04A==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2883,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2882)","md5":"b3148f0f12baa3c9750842324d0690e7","sha1":"5fe00729faebbc87c6371c81ffe604fadc4ec0b0","sha256":"fcc61f5cb97669e569d4c37238f2f119392f5978ad6148584feb2c6714be756e","sha512":"cdd040b88b849d6f8115ef23a206a8b3e847d9e74828f5ff915617b9c4cb70521fe378b6a319c15ce3c96763b9caa310c146b1e0a5c98e94a7c4fa699b4f7441","ssdeep":"","tlshash":"0251239cd1cb72764165e68a70137752826cf2079c40917a7f9df7817f18e87b486e31","first_seen":"2026-03-17T17:43:41.208347Z","last_seen":"2026-04-29T23:30:42.036301Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/DepositWheel.C3HxVH0l.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/DepositWheel.C3HxVH0l.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-5b7d\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: sV8zUUHIU93Hxi0WPWNhdt3wMfig41WJAHvljpivG-DQEDkX4IOEuQ==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":23421,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23334)","md5":"944e4004ff23909900d04d71f2441e10","sha1":"90c4be697819d58df4dd28bbbcb5c02ee2218c6f","sha256":"82de7d7a4e5a1e1aac2e22a079cd44d7f618d68a2d775e0431a1d7de63310d70","sha512":"43a1fc1dcc570a09b679ee0f5103af0af4855cdb3420a9272674d28ccef4695155d5272097afb4cb67b7e01e7514f7f4c8bcd73540d1734110edda3851314605","ssdeep":"384:HRbuIFmKoEaZ3LRSI2H+47ikYocaG0NM3ihpxQysACU56lV10c/pWNU6S3OQ/F2i:HRbH3oE+WH+47ikYo9G0NM3ihpxjCH51","tlshash":"5db22a14ba2d843c93b269d850e8006131363f4e9442b8d571fd5f6f936ec9a35daf3a","first_seen":"2026-03-17T17:43:41.226369Z","last_seen":"2026-04-29T23:30:42.164298Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/e676711ce1ec5776b68c399518fd5dc4.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/e676711ce1ec5776b68c399518fd5dc4.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 17mqQbPcpgxilJIMt1qVGawTQ4N6g78nSMKCNd5hH8y2lBOiuxfPIkvrFjPh0CiMSDyiW9JcXL0=\r\nx-amz-request-id: ND72JPZJFSMAVV1C\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:10:45 GMT\r\nETag: \"b6682683862a7a7fd520d2b79663aedc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 14744\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b6682683862a7a7fd520d2b79663aedc","sha1":"27fe56346550bff3ec01db48903b83625eaf72df","sha256":"86a8efd97a3b6216b4876f7888b1e0627de32e77ae4959e8ef89c74a485aef1c","sha512":"3ab75202c9af0bb2f5e681eccfe35316f38ecfa449eabe2b7a2badc87be826f45e8a3158bfa2ed47f0ba8ed2368027053a56f77d61d45ecc1f85a67ba6e452aa","ssdeep":"192:vSQyxlRiUnKjV8E7ZPQKUS7VU190psktwoaSVKtOccjZOqS4ZNKC9YJpWyFRHq:vSxl8Uk7Nz7VA9QdtdX0T2nqjWGRHq","tlshash":"5862e199255635e41cdc91dc9ef20ff95cddcc3993e9674830dede2002650d06eaba8b","first_seen":"2025-11-30T16:25:47.87748Z","last_seen":"2026-04-29T23:30:42.110066Z","times_seen":11,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/9-BNp6LVRe.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/9-BNp6LVRe.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-5563\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S1ikJRu7PSyeESof8oA_Gid4FWWiBoddV0fo1aGXg40y1azkz5zQZw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":21859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21858)","md5":"fb600ea56bbdb98bb40d562e865f3518","sha1":"e22e051f7138417b7f5aadc8a4a64a0edeea1664","sha256":"6f55108bcc78006428d8b6fe68667994e5248740da0bbc57b536e6f747a754e7","sha512":"28bbd6c51c1421047414eb9627c4514ea9bc1fde5164f3c2818ac787a088a3b76cf96f17589974167d0d6afb6874949c8584a1aa30913c1ec817acb235827058","ssdeep":"384:qf1e5h1nEL+ZNqtNLEnfAjHpru/wraZEoH1tX41lJFlSQe5mI0fylgWl2z:qf86L+QYnsQncz","tlshash":"62a205ae3b8f240595ffc95e78f0a7d401317b2be202815f96636966ccabdd33d11688","first_seen":"2025-11-30T16:25:47.852069Z","last_seen":"2026-04-29T23:30:42.109323Z","times_seen":16,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/tab/jili-off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/tab/jili-off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1869\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-74d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: XwBOjZt2uxOA-2Hjdgzc_6afhdMGMPwbfQcng4F8qbWauM1jTTXWNg==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"30813137c60e05674fa8933103639854","sha1":"689a17df7e97746d670a444de864102781d966f6","sha256":"2810d040d28f36cecf6306d8200c7091390286f686afa38a891b3c5f3e5043b9","sha512":"40fab4c5faef7bf8599aa2802c9ad1ffcabfe5e83f4f76ada8bf856eff3918d253d389f815c93024f4fda61af2ef61a28bbb537032b48ee33e622b14f23116b9","ssdeep":"","tlshash":"e531971bab6a7d01174be4045cd8739faa1747845681f4b1fcce4c13dc202faaa1d5d3","first_seen":"2025-11-30T16:25:47.862065Z","last_seen":"2026-04-29T23:30:42.150112Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120176.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120176.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rfFnzx6vwnqlEH5nWQhOOobXavMd+Q/JJcRYFCWj0NF+ScVIkt6ybspi+MA6Fc6qpslt6LpqELI=\r\nx-amz-request-id: ND74R46B16F7964C\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:48 GMT\r\nETag: \"8239fff157ceb78c6f656f45fac06bcc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 48186\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48186,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"8239fff157ceb78c6f656f45fac06bcc","sha1":"8c8ae0ed6965b54dcc84e89cd78f0efaca5e1061","sha256":"d204111d1fb2c7ae625614e4482d9962c46a61582e941a0381ca1d42694473a7","sha512":"d892ddcccb6beba4246f72600e01fc3fdcd04cb8a7ad9f08b2e0e72bd42d15647ef8c2b8328a8cc56e285e841657d1254c9c0a4f228df235a2045960b7c920c2","ssdeep":"768:Oa6jbnyargPQ6jbnyarP3ih0LEwSNL4L0qsbH8947isFV4teTTDwwPenZUyt:J6fnHrJ6fnHrPSh0EBNjqsI9sFV4teX8","tlshash":"2523e1bea3c0ae23f4c0927258ebcac7561548499e977952b48d70123fe15b09e3df63","first_seen":"2026-03-28T21:45:10.761245Z","last_seen":"2026-04-29T23:30:42.147376Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1352,"timings":{"blocked":1175,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/uni-app.es.DArlo3Hh.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/uni-app.es.DArlo3Hh.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-index-index.ClxU0WMF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 243\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:20 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-f3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: v9Y_ZfxlXUp5ixPIUT8NHtI1cMVem9jTVRCKecdR3bDEu3shzHKb3g==\r\nage: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e50699aebab8da9ffdd0dbd0bb616c19","sha1":"97bbb4d0548b3a978f6d94e294d36db9580d5dad","sha256":"30670f50011b8bd30d6ffa8d440df332734b559891248a82fc0dc32e4f06df08","sha512":"3b0be6f77e1f08eab276200ce354a68116dd7020a8ac49adf26df4882ceb63827deb994fcc464a53b17f86e0c1abdbcbe5b42cd746e4e50f2ff084681392ebd0","ssdeep":"","tlshash":"32d0a79ea459e7ba281b848d3038190f8158b4f62e7886c0928b4761e670459d13c511","first_seen":"2026-03-17T17:43:41.184381Z","last_seen":"2026-04-29T23:30:42.110809Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 225\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"sign\":\"404d2cdf8edd2f26daed07708e11e0ec\",\"uid\":46001926,\"time\":1776958488514,\"rand_str\":\"ead7c012d821927bbadfb5bf3f9858aa\",\"lang\":\"en\",\"channelId\":10023,\"deviceId\":\"dfaae9cae854a313c03fe591012c2ac1\",\"os\":\"pc\",\"eventType\":4}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 35\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: MSLsYwr-CfZfGfe1e5easI3h15oUbtWUqGbzs9RSLVGjekxtDxt1yg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e4a764f622d60195f6aec7a35a930ce","sha1":"61fbe38afd20fc9105df9ae196f46571faf79cf7","sha256":"769573b07ea424d002aac26a063596ab9647a18a680c921274c7e94580143a90","sha512":"162c48ebb8eb57782de7fdc8d6b2f611f44e05c75fc5b826fbae014e24daaa5a628dbad18a847b70ad330cbfadd6a44ca823199b080bd514a57f88b783f7ae6e","ssdeep":"","tlshash":"40800400153c1c5517034145300d1404405d10404c4110114c4c551c47044501131534","first_seen":"2024-08-19T16:58:49.888719Z","last_seen":"2026-07-05T14:49:46.751703Z","times_seen":31,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/mt-C5kPie0n.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/mt-C5kPie0n.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3011\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-bc3\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0I_3WJpCnyqkTr3xKprBmb_AM5T25oI9pjEWKdbwQeVVEZhePNHurA==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 33, 8-bit/color RGBA, non-interlaced","md5":"0609e844a4ad57fdf5056e3183415904","sha1":"a364b05c158158be0b2ee843f5a8632d99b48155","sha256":"aa36e8fc17a734938a488244fc270c13717b1c226e583351aec0710d4bba6bf5","sha512":"156e17b5d836b0651b22d3a95edb9e97d27fea6d8c4bb84291d2e077ef02214240fa185a80ace82d150637d2dcb23e080c78724f829e2d2b0c0a8c616612398f","ssdeep":"","tlshash":"20515df25740f49bbff080ef0c04f642a87e74a7014264e997657481a62a4b340e3567","first_seen":"2025-11-30T16:25:47.819957Z","last_seen":"2026-06-17T23:31:32.801965Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/9825d07a160b7cc6793d45dcf1f33226.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/9825d07a160b7cc6793d45dcf1f33226.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8XqtXtLHUBRwtQr6RkBtHxOOp5JHaRW4nbFsbD/400fj/UXo+tyKS7m+QIRgkgNVzJaxUiGZNOM=\r\nx-amz-request-id: ND74J58FY67TETEG\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:07 GMT\r\nETag: \"4b7409dfbffa966c608b18b2e693e877\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 14042\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14042,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b7409dfbffa966c608b18b2e693e877","sha1":"37b7424ee816132d844abf59a4b5b58e0809720e","sha256":"801cc074ecb3806ec8f02879a381110b86e9c69ea549a9961908156f4814ca6f","sha512":"d6ba804770bc2c32f433f6fcdbf4e1ad65e7f1c00bdd396bfb65137a7f56a0fe5599b0b44d8bb7a45352a95925f2001cb2d9e4226a8cb90c654751651142331b","ssdeep":"384:+WCSdbl+9NSN0PFhyX63dDVmWsdJnLRMGuEW:+FKp+KNGhyX1RW","tlshash":"f452cf8e5e2b66434921f0e9f2d3b8b7435c58cbc0367259cfa531b589b8e2169cd41e","first_seen":"2025-11-30T16:25:47.779395Z","last_seen":"2026-06-17T23:31:32.683536Z","times_seen":14,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":786,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/3dfa05b64f16dc17a80e7ac54058b43f.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/3dfa05b64f16dc17a80e7ac54058b43f.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: P2/EOzR1aOXHU2AL2MfCaej/rrn75O7YumqtTgDPXy+5+MuwL4P8beLFshsSGy939o76aKBOsp9OjJZ++NhgVcT/NAvClEQ4\r\nx-amz-request-id: 5B39VBCNM57FS3T1\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:09:09 GMT\r\nETag: \"6cd4429ad07e73ed68b2d16c17c964a1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 70184\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"6cd4429ad07e73ed68b2d16c17c964a1","sha1":"d93b0b82e3f81dbea2887938f834773afa98768f","sha256":"8c8b0213f0839cdcc54aeda957f423712cb03650f0e9588f119c434f99278d42","sha512":"d850ec162d61032e97033a839f2cf9599de179bf11948960ce58e9fedbeafcbb3fbd5d2822408ab128f3cc72f8a05b6c8c926daa8fcb44a44931d7d8e3d580c1","ssdeep":"1536:rMprcbqxA0KECUgaIXVRyWn7TrfnNQltbTS436m:YBcWxiECVXnxn7Trf23bl36m","tlshash":"086302389e44b34d2439aa37a305e16cfad2d5ba0307ffbd59c7503877446682ae27e0","first_seen":"2026-03-04T09:22:28.745439Z","last_seen":"2026-04-29T23:30:42.133616Z","times_seen":10,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":1,"connect":93,"send":0,"wait":125,"receive":184,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/120051.jpg","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"52.219.117.168","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/120051.jpg HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: t+qT4Nsg2CcxyrczvhHDTd8IERvSZ5BLb6NCGT06Hatbdx4qspFnI0cIqhfZkpExkOjcXtD1XfU=\r\nx-amz-request-id: ND7AX2WR0DGDCRB8\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Mon, 19 Jan 2026 21:13:37 GMT\r\nETag: \"48be105c2b07d580db16a7eab803e924\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 57104\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":57104,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=400, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 300x400, components 3","md5":"48be105c2b07d580db16a7eab803e924","sha1":"6f01f14a234f9709db72c41c006b9e9cf4e8fed4","sha256":"3e93983d996b32b8a489440ed17fbe5ab6b4f8d3effa2f38884f90d0722dd9ef","sha512":"38941288369d388a2d9c0160c136979aa136006917ad858df0e7e24aff6bf2e6e5b55b677f9fac179a58bb7b5477306337af51f9e93a0f1adfbfbca371000959","ssdeep":"1536:gGWEC4MGWEC4qFswBmA9xbe9TCYoDmjgYTCSx:HZCcZCTs3gxbTYonYTdx","tlshash":"3d43e05ab7c2ed53ead221318992c3f522117e88dd9332abf5dc2d47b7b27560e48213","first_seen":"2026-03-04T09:22:28.725812Z","last_seen":"2026-04-29T23:30:42.094327Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":922,"dns":0,"connect":0,"send":0,"wait":171,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/downloadguide/top_download.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/downloadguide/top_download.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 31822\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:24 GMT\r\netag: \"69b6c9c4-7c4e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 4bu9wj9rcpgNqpDfPsX2wWT-HojYyxKi4y8WeVYavJ5_CuSmqDAV2Q==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":31822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 48, 8-bit/color RGBA, non-interlaced","md5":"63dc635ae3ccc7d1f92210ac5f1e4d77","sha1":"2de15b535f83d6d68cc71b472746fc806f0aa736","sha256":"43080413dafe1b82f0a50bcd61a197e0b7915f3c8bc0054fedeb906c3107e257","sha512":"e4e09f2a9b4d8d04ade90f0b3cb0c91ba2cf9e4f9324a1da1a4a65aec726664f07170e2f4f0443b8990120a36e953a761faa90b34c0ec32ef123324fd1856942","ssdeep":"768:vhEU9aQN/7T7ROfRuEg3gAi4Yiavjp3/M1Q2NaukGll3J:JlaqROfIE9Nj9/ZY33J","tlshash":"48e2f105907f2c8416d36c2b6d766a7e85e2cf44d71458a6c3a3c23615f09fedac8397","first_seen":"2026-03-04T09:22:28.762964Z","last_seen":"2026-04-29T23:30:42.104048Z","times_seen":9,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/message/getHallMailPot","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /message/getHallMailPot HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"1bde4bffa83394ed97eab9575aa5c80d\",\"uid\":46001926,\"time\":1776958488028,\"rand_str\":\"f32ce3add1bd344b6d6b3a3139876e04\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 49\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: GlblRkwz6rPfTXHDsX9JPHRWLuQXcNQqmng-OHghEzUZyAdDyQrCFQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cef39668b8eb5819abc5f5d5ecad0661","sha1":"88a618a8f23779f96ac2a69d0b95a99253070e2e","sha256":"15f28b314d21742bd39e119c93cf92cca00971b418003944fb1ab913e41a1902","sha512":"f15c96149fc32d7cf0d590e3f11217d2533707a3cfd38908eec49869ea629047a0b633a08b28e976f43bea5fc4793871f221717fb3122556e8866721761c2291","ssdeep":"","tlshash":"7c900240152c5a191b068585200d1604916d10404a5118124d58d5184b188946125934","first_seen":"2026-03-28T21:45:10.885015Z","last_seen":"2026-04-29T23:30:42.122018Z","times_seen":3,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/31548--300-400.png","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/31548--300-400.png HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 63LGIxX+hgBbSRYqMXtmYJObU4HkXH85/1Yn7GyAXJybKRYLe3PkmhQ14Ohc/N4giNRpRH4/+HEym/71ZbvxchbB4zeplfjZ\r\nx-amz-request-id: ND79Y2WA0KGTPZGW\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Tue, 25 Nov 2025 02:45:54 GMT\r\nETag: \"6d3e73c3fc4c7fc884518df2ac367eef\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: binary/octet-stream\r\nContent-Length: 54765\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":54765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit colormap, non-interlaced","md5":"6d3e73c3fc4c7fc884518df2ac367eef","sha1":"c37828d11a49f5fe35e6493c5f2c331642991599","sha256":"80cd66be3aa32211213597e3d28e5dacd2527949ebc0690a0b1e3a7405a5b8fd","sha512":"8052c58230de5b0da11c57f13c8f424e6624cba46a869fec2648f647c7e87cbc2f12110c9560ea4b8b45fb3d0a0ee099bc72c59e148c1e253a3a7716c6997aec","ssdeep":"1536:JgbohgfxHG48iwp2hMSHCxfdfjUJduTX0vuxUynMCr:qbocCijCxfREd4WGvt","tlshash":"f43302a4c35c5a74ae4fb478305fd34a38a510de29a9c624e314d8ee865d3be02d2acd","first_seen":"2025-11-30T16:25:47.773251Z","last_seen":"2026-04-29T23:30:42.198898Z","times_seen":7,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":633,"dns":0,"connect":0,"send":0,"wait":171,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/promotion_off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/promotion_off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 686\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-2ae\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: etHDkoCI9vG_vkvGNv2Z68x0HR6eTZFakJSJO9nxNnyQjk_WUhjjIw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"d77af339abce7b5872edacafa62cff19","sha1":"564a1ff900c1a19ec7640cab4ab9a458cc6ddd64","sha256":"880db52d7f9c93ebfee4052e2f305eaeb8bdf59194b8565844bcb7cc1e23ede0","sha512":"4a8ebf9b249154f0496a1c296f1b02dd67176fdc8591ab260580375afd6b28b12540b0ac26a47a6d480ef83af91ff931a49cb3360572af0ac7da8c8fd7ce6c3e","ssdeep":"","tlshash":"460144d4bd9511f86404256d9b2215a50a4108e267c14fc1c36b8589b95f5c2776e38a","first_seen":"2025-11-30T16:25:47.889309Z","last_seen":"2026-04-29T23:30:42.03744Z","times_seen":13,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/service.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/service.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5315\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\netag: \"69b6c9c4-14c3\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: FMGN135IDxjXPYqBBi4xqSkJGDxxoAjruQ2qvscsvIjHY29b7Rv6Cw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 116, 8-bit colormap, non-interlaced","md5":"e953f654685f53bc1cb7054361560845","sha1":"5929c899cdda89f2d48583f8cd1438a5e9b309f3","sha256":"a27146c282b7389faaf74328d188428477d029a64250c8c78b475d7d8cdf0603","sha512":"60e63ba68d6a3ca46797c45478e0b875a5ce1369d32bd773cbaa1df6f1f684e1809e90340a68bf8caf60e49aac031b67dfb4a7175b09e71b539257920c9b2c36","ssdeep":"96:z71PAOpXSsRYcoHGOREu+BZ88ES7tvntFMCneTRjndV8jMsM2bxSf4h:z7hvXSSOVIRMCeTRjdV8jnLxDh","tlshash":"70b17ccc7ce4bb0296c0656aca9e85ecc63f6fbb24c9a41ed6d6d3211141a1968b814f","first_seen":"2025-11-30T16:25:47.878337Z","last_seen":"2026-06-17T23:31:32.899547Z","times_seen":18,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/a0516c904dbd21b21aae4e2a0eb7972d.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/a0516c904dbd21b21aae4e2a0eb7972d.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ER/Qu2vSKW1+AA7brSrVvwtpzkvCCN5UyPa35w2TplBigv6W2wYfil5EJlVTMJDSOuUOLdNpG+08DcScNylpies4gclPFouY\r\nx-amz-request-id: ND7CFEN8VW6WPS56\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:16 GMT\r\nETag: \"41d5b58235adb29607cdb23f4c920b8f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 12752\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41d5b58235adb29607cdb23f4c920b8f","sha1":"511b2093fd3c42d7a95f0b756ad7bdb8151d5da6","sha256":"d3f079dce7d5c02cf9e6060fb790035b6a718c5338a2743dec07e76bfb9b4a57","sha512":"c63d2b4d89fec0f6aaf26ba05adc2d7e70258a8f70811c95ae61d3c436b2ef50d9b77e45f4c5e4a261dfe496ef51401c63f597eaf79431438ed35bad6ae1febf","ssdeep":"192:uCneHDjU8GUyOd3qeT7IiPo7/ilPRUYgs3RnjayHqBXPVuiEF/6ok3vdz6a5Xb:gUKX62TU/i7vHqZVutyoKvIyb","tlshash":"0d42b0ecb7bda21bd6097a7be400511fd2113e9c4c9a1c5477911d88783e695bc232d7","first_seen":"2026-03-04T09:22:28.758268Z","last_seen":"2026-04-29T23:30:42.106673Z","times_seen":10,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":732,"dns":0,"connect":0,"send":0,"wait":180,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 225\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"sign\":\"6f677bfd47117afbe12a6bc1beac5068\",\"uid\":46001926,\"time\":1776958489499,\"rand_str\":\"ffc07273b7284c1581c84ca0f1b9cd70\",\"lang\":\"en\",\"channelId\":10023,\"deviceId\":\"dfaae9cae854a313c03fe591012c2ac1\",\"os\":\"pc\",\"eventType\":2}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 35\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:49 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: AXq1ake-AQ_0euRCkj3b0OvgjfFoRRstJO5tr7KOK-EZKqa5YAQEkw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1e4a764f622d60195f6aec7a35a930ce","sha1":"61fbe38afd20fc9105df9ae196f46571faf79cf7","sha256":"769573b07ea424d002aac26a063596ab9647a18a680c921274c7e94580143a90","sha512":"162c48ebb8eb57782de7fdc8d6b2f611f44e05c75fc5b826fbae014e24daaa5a628dbad18a847b70ad330cbfadd6a44ca823199b080bd514a57f88b783f7ae6e","ssdeep":"","tlshash":"40800400153c1c5517034145300d1404405d10404c4110114c4c551c47044501131534","first_seen":"2024-08-19T16:58:49.888719Z","last_seen":"2026-07-05T14:49:46.751703Z","times_seen":31,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/firstPayV2Config","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/firstPayV2Config HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0vlctcWz-W5YN-XHT50aGzriVmNItHggPe3k20R69BPKblSzvyUiuA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/3.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/3.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16252\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-3f7c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: qiPjBOxX2d7LY6didNt_t77VdTA_p4dFkvWvL8NOH-wUqU6t6k8H1A==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16252,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"00288b407c9211682d90041eaba9b986","sha1":"976b03a63f462af27570897decd087bd8387912d","sha256":"c16df34226d4ad8ea5d95c89c2694c6ebad2237761932db0cb9079bc568679c9","sha512":"03c2cff23ad8c65c572e00e6a45f6b242d69fcfb5dc7571971bf72acedf5216b54a32d7c0055cdc18eb0d2afbfbab4c70d137c8ff024020b681f2bcb87dd76db","ssdeep":"384:yqCIzkg4GoYhakfDDEaUJQHTNqSKjOmEicORmf3j2DCyHYjLg7:fNoYhpKuVgcLvjMFYn6","tlshash":"8772d137d48c75ebdd2ba12f0c63db389558bf850840e82870f50462cb9ece52fe651a","first_seen":"2025-03-07T18:03:18.807122Z","last_seen":"2026-04-29T23:30:42.196505Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/favourite_off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/favourite_off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4960\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\netag: \"69b6c9c4-1360\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 9Iu5qvlC3jXIZG2bLjGTFLJBYAE0ZO5u9UkH92r2XXThRZmMUq4-Ww==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"5160e214dd0c0416dba6a833499d22c0","sha1":"d3ffe6accde2b96f9a410ce47ca9264c691c0b60","sha256":"98784fc8dc8037be4bd03fa4df0aa4d74cbde84e2fece3d6d8b706231b52187f","sha512":"cd8cb97f6ae76cebad8a21e9785670d3060332945d4a34d4ef659e75ab54c6542fac8e808f590af8c74e7da2352b73736618f5d85b237c24c89207d64ddb78ea","ssdeep":"96:6SCfx0F7NoCXdK51sJTi4Mcig/L7UYopu/7y94/irEC6ZCrDT6j:6S/NoCXS1sBiFcdwuO94ZpZCrO","tlshash":"0ea19d566bc5b513c59606260a266b0de8cef7c41d61ca788fc6702362a7fb8a3b0502","first_seen":"2025-11-30T16:25:47.804003Z","last_seen":"2026-04-29T23:30:42.042272Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 16:45:18 GMT","end":"Sat, 30 May 2026 17:45:14 GMT"},"fingerprint":{"sha1":"EF:8D:ED:C7:B3:46:8A:91:47:71:92:F2:D9:B0:67:EA:C1:FC:5B:89","sha256":"01:CA:DB:EB:79:61:2D:B3:FE:2B:09:FE:44:84:EA:5B:6E:C1:3B:81:A1:0F:8C:9F:DE:2E:16:1E:59:45:06:D9"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f0def33aebe723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":20,"dns":1,"connect":2,"send":0,"wait":94,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/newbieBonus","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/newbieBonus HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"73c131a9ae668218e36ed30487d07661\",\"uid\":46001926,\"time\":1776958487601,\"rand_str\":\"80fc6810fb2b13ea6053ed905998bd8b\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 75\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:47 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kYCrBr37QcOyCsNsDGwMQN2R9ABzb8GGYbvq6KOuJbHHs1soSby9AQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6393c6565f394ffd40e9d62c178ecc03","sha1":"268d8c7b86e864bee241cb37e42e639515e19572","sha256":"fcd8b6234319245a9cb250b0dd736cd5ac3ab96ed3b08abb02c43a826e243574","sha512":"5c40188cbc6623879bf44c276ea686499c73d55c506b0a5d7ff3bec3fc1571cab74364beeb76b7270a93b1c2ad6b8690c43be4d37971cb562a6f0b6c0e240d68","ssdeep":"","tlshash":"97a02280233c8830e3020b00230f28020a0c3232c8832c02cc3ce230338a83830b2c30","first_seen":"2025-11-30T16:25:47.832465Z","last_seen":"2026-06-17T23:31:32.763247Z","times_seen":14,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/tabbar/account_off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/tabbar/account_off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 815\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:25 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-32f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jptFhd2HeZR4G1dM2-mZMGZ8XllSqIekB_5HrmM_yPoyNa9VBoPXCA==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"63c303da0cddf976daf8cec2624b1e19","sha1":"66bae053ab0aff2b4808eb443e3b146aafc668b1","sha256":"8e9eeb98970412517eddbda6fa7761fb84dd90d8f8ed1f352e985942b5467f0a","sha512":"22552eb79a9773f80d8275faaa5c9fe0f01109c3c56f54b793e797764bc364c5706a5be5ee498f6f29341a3af21dfef26ee438992db45c26cc732fbd0f39d219","ssdeep":"","tlshash":"fb0186867ab0a48ad1df4c72a432c48669ef9161f1850a081aa74b492138acd103bb8c","first_seen":"2025-11-30T16:25:47.792082Z","last_seen":"2026-04-29T23:30:42.099074Z","times_seen":13,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/btn_close.CTrYlZKH.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/btn_close.CTrYlZKH.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-6e1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: SH6-ZbdYsBMvtyeykFWSe56XGoC8tiWj1hNbiflB2Ln3dJP1elrBJw==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1761,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1760)","md5":"987ebfdce42147ae4abbee784242458c","sha1":"6f7099e7fd39a58fc29447e2e4299aeabc0fcab7","sha256":"46541f032a1fc5bb706895a74307e493079f2f340563821d451725c65b294f71","sha512":"6bdbf020065f37afd4a49546f14811ebfccc5b8d795d5308b8b0a29779bac3b1abc675bddc37428d459f3132338fc41e1611a803fdecd6731b1816617cdc0dc7","ssdeep":"","tlshash":"db31e9b7408bee63d6d94c4ca94f80084d72ce01ee51f4744974534d9d8bce09a7a174","first_seen":"2025-11-30T16:25:47.818224Z","last_seen":"2026-04-29T23:30:42.047112Z","times_seen":16,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/redEnvelopeRainInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/redEnvelopeRainInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: FWUnzwAv68t0xWCPa5NIWH6R-53pEFrEla1p9sMLWF3TVeuPLCTvgw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/GetHallActList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/GetHallActList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: rrHGt6jX4tCtRfNXSkDUiwkqjxz779daORBpBva39CaZ2of345PuEg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-west-1.amazonaws.com/phecda-bucket/popIcon/BHdownload/6a05ccc42687426ae28d0c80e88e3b32.webp","fqdn":"s3.us-west-1.amazonaws.com","domain":"s3.us-west-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.0.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-us-west-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 17 Feb 2026 00:00:00 GMT","end":"Fri, 22 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:FE:35:0F:65:DD:D8:76:79:12:AA:C4:1D:14:68:12:21:58:FB:90","sha256":"E6:9A:98:59:0B:F2:E3:BE:84:92:00:B3:84:92:EF:14:6C:B7:1D:49:EB:A9:CD:4E:B2:39:DF:74:1F:6C:40:A6"}}},"request":{"raw":"GET /phecda-bucket/popIcon/BHdownload/6a05ccc42687426ae28d0c80e88e3b32.webp HTTP/1.1\r\nHost: s3.us-west-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vj+8cCeX6rQ9AtyRdA4ed4z5EPKPgbt+bMSfl8tkrW2AheJ9zebEdt/M++ohrqaYZ6ZwrEfkAekNDWLe+UGrOmKxJjz7d3g7\r\nx-amz-request-id: ND7ERY2JE9YZKKHS\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Thu, 13 Nov 2025 10:11:18 GMT\r\nETag: \"37eaf12eb221c9717fcd29af367e380a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/webp\r\nContent-Length: 27092\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37eaf12eb221c9717fcd29af367e380a","sha1":"52ee1096e9bdc1d43e9ffee2ae1bb05dac1941e0","sha256":"2ff7557672c8616f8f73e0095617cbfe13c821ef986f081c93dbe3a6ab7f75dc","sha512":"b0e106f9b9876bae23bb78b7b324264857614d5ebf2d1c196669d593e24f6f1f4fdb6685331a1331e968aa88ccc79035c1bedf95ded592daa510227363cda182","ssdeep":"768:V7Zjuax1Yyh+t9kGcCwOI9Z4w8THjzk8r6:V9jueJ+tsC5YZ4w8TDY8G","tlshash":"a8c2e1d3eb2082fd7f18d460f1caa0476b58bae5e2c06636e45f2051d0a00dbe76de98","first_seen":"2025-11-30T16:25:47.815294Z","last_seen":"2026-04-29T23:30:42.122773Z","times_seen":12,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/9b94efe4e3edd9c8cc754b10854e2817.png","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.244.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/9b94efe4e3edd9c8cc754b10854e2817.png HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: x0zDN3nlUb75C0OwwCtfprQpzC+Mj6xFMrGRBamv4MVoZAd7UMBgxe3R4zX61mkNoVvTOx79hWiehVvStowlcZzIaQVvgUzu\r\nx-amz-request-id: 5B3FS85EQQ9Q78PT\r\nDate: Thu, 23 Apr 2026 15:34:50 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:04:26 GMT\r\nETag: \"5f2183b49135d39bf92b2fd7be64f64c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 71255\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":71255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 215, 8-bit/color RGB, non-interlaced","md5":"5f2183b49135d39bf92b2fd7be64f64c","sha1":"aaf5615c2ab17c51d54f6dcef151174ea100c50e","sha256":"4686dbef088a6c86678b70b16bb303a2c0cbc7c6c88b6c5e6ec0b47ffce248a5","sha512":"04c372094de187127d5f829e84abab193093eae0c6a6a17e350b4da277d08f8651abdcddee0d64189ccfe4898a669464485025db7c34f0b9e79efc4ce982e38f","ssdeep":"1536:pGlf+T+83tR4QX21WghdtRApDhmMNU6JjHUuwd0h+GR9GU:kPytG42gghdtRAJN3hnwdzGR9GU","tlshash":"47631202fa66639a7f06367050e334908f41a0fbc257e55da05de8f8e15b2e7049badb","first_seen":"2026-03-04T09:22:28.753517Z","last_seen":"2026-04-29T23:30:42.179873Z","times_seen":11,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":99,"dns":0,"connect":94,"send":0,"wait":125,"receive":96,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-index-index.ClxU0WMF.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/pages-index-index.ClxU0WMF.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:20 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-7b4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: CnnEJ60bpNSsU-vAvAF5p6gomRjmx0wW4rebLCC86x3I56pTLUG2Zg==\r\nage: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1972,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1971)","md5":"6e53ffe899652d64e7238533724980b5","sha1":"14047ee5889d5a44ab0b5422a05022941018daee","sha256":"30104b78078deaeead0f3b167a797394904b0c81539dd20f2981d92b8c66da93","sha512":"475ba200ce2beaa9908088059bba31308463545295a75e1037d5896fc0a7695057f6e20a6c7ee6ee40c67903c2a1b150763466b06352731aa4127c1b7339a9ae","ssdeep":"","tlshash":"8141a83c935f9574054614cd267a1078e039ab282c76ccd17b1f06212dec5dba0debb8","first_seen":"2026-03-17T17:43:41.207032Z","last_seen":"2026-04-29T23:30:42.029059Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/constant.C5_EDeO_.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/constant.C5_EDeO_.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 388\r\nserver: nginx/1.18.0 (Ubuntu)\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: \"69b6c9c4-184\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: n4cXihXkDAHA1aNSqMzPTZwpLajbhB7n0HTDdZQxVjn2i9OoDlC5Cg==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (387)","md5":"98fd658f7451fae68930b90e71278ad8","sha1":"38ae6e3a76511ec530caeeb98f88b45de2bda8b7","sha256":"2251fc773b1f8fb795ec53776b59c7cf265c2585fa445d5ac8cd155baf92ce97","sha512":"eeabc203bbe6f10721be844046785fff6fa26f45a478139232e8b5aa507ba1f3d547f1aacf3f20eb1ab7bf0448622cfc30232a9a140e6b444b85349962605e74","ssdeep":"","tlshash":"92e0d826978e50f1c936ff0122caa556aba1155264be0aa01698ff800389481e3ddf9d","first_seen":"2026-03-04T09:22:28.72857Z","last_seen":"2026-04-29T23:30:42.049107Z","times_seen":14,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/redEnvelopeRainInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /agent/redEnvelopeRainInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zCTtuylVktaiOovsKp8Berde-JXnX0rII7eMuEoIU6FkUvGFhoDnTA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/message/getHorsemanList","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /message/getHorsemanList HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1xNrTUtIcTUeq_I-4fMuOsxGvVypEkruZmgWzFTD4aP7wZa8Ad7-6g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/configura/eventReport","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"OPTIONS /configura/eventReport HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://seven7.vip/\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin,Content-Length,Content-Type,Authorization,X-Api-Key,X-Signature,Api-Sign\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\naccess-control-max-age: 600\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: L0Y6UuaRaytfYWjGVSXUwYivaipanViReVX46-ydJ4TVgGmB_jjQTw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T06:24:07.956641Z","times_seen":17541112,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/home/tab/huo-off.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/home/tab/huo-off.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 563\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-233\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: c3ryOhxWyleLmCq-iZQtb0aXjlaeaOptodZR0izOjn5BkkHMCnbnQw==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 50, 8-bit/color RGBA, non-interlaced","md5":"64906e8c31cc4bc3edbceec19aa3e845","sha1":"4546828034d59a3499acec6ea3feac3ccc966b8d","sha256":"e49cbf7ccaa22cdd1f75ccc8d1a452e2d3a3d3740f2159cb26831c791ca662ab","sha512":"520840a4b32653cf1c64907761f3521ebcf355b719730c78b029fbab7ac3356235f6d699f43e01ec9d86341e5f48f94f007cbdd340ec8bba053fde7b08eb5476","ssdeep":"","tlshash":"cef0414ce3ee8ccec5820636abe5e10ada35a8604c664a7e40a8940810d0adc4d7090a","first_seen":"2025-11-30T16:25:47.840958Z","last_seen":"2026-04-29T23:30:42.130052Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/visa-Dz92hUnj.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/visa-Dz92hUnj.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4044\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:17 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-fcc\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: OhbtbtVgkx5sPZBRramjDKoqADB1Z7tlKUUN_1x8_Uf_gv-Qfut4Pg==\r\nage: 92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 27, 8-bit/color RGBA, non-interlaced","md5":"c7791162944dc1ab9dcce870786af165","sha1":"69c23819da070a193204a7610c87c3865130803f","sha256":"95bba0e6af84d67809a33ed29d7b6b163649fa13512e52425544478d59f1c1e2","sha512":"57305763483eddf6c9281ab48ae4efde2c16ec3c17a5248d861d21be054761b770cc112e6ff6fda79365d56faf9eebb285a0e530952dbc81c030a1dea185f0b8","ssdeep":"","tlshash":"ea818db8afb6b6387ba034a03c463e66f50123dc27fcd0caa51e6f9780740052d482d8","first_seen":"2025-11-30T16:25:47.867213Z","last_seen":"2026-06-17T23:31:32.844796Z","times_seen":14,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/1.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/1.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16458\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-404a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Kssi5IrHMX8i6b1qfpfgvxLAM02c-rm42o0dXlbEbkPrEDmMa5CdRg==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16458,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"1f68e5af6bd01bfd21da4b1e87775728","sha1":"6b6dc397a17a2c7b4363c132abfb4f0207e0f29e","sha256":"7c687b49940668a7402975a94655f639b360a2d9f4b6a51c41f9b8a3b3471aa6","sha512":"80e760977a144bca27b2bdd6418ff82a54e9185f21bd0db75eaad4b01611c4ffb5024af76b09449e155876e0f4a3c4e8d78a7820ce6c2d71c6685a87ce9323b1","ssdeep":"384:GlJokm7wbP+7TpBQruz8VqH+cHWCjpAJ0preKILN2qLQIu:ZO2RKg1LHWCjpAJ0preK+OIu","tlshash":"fc72c082939c8f11e566cf21751588bb997ac79e6144c4ac6296c4e2c0bf8f7fa07e18","first_seen":"2025-03-07T18:03:18.919087Z","last_seen":"2026-04-29T23:30:42.195604Z","times_seen":17,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/static/firm/5.png","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /static/firm/5.png HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/pages/home/Home\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1494\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:18 GMT\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\naccept-ranges: bytes\r\netag: \"69b6c9c4-5d6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: rCQLcvkdmUxEAUnAzTWO0GHDNY8R7MgZFCVN70X4msvAm0RhmKAtww==\r\nage: 91\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"7546fe5823a91d4819ff17dc29ffbbab","sha1":"b856e62fd8430399cf4d746aca17a9ee38ec958a","sha256":"56d037f09b4b7eca59d64242b1c39feaabd4f90cb58ea2ff2c6f30a45efce2a2","sha512":"aa8b0434b2a0e008a9e891eed33b7cfc546919501a4a1fe8bf91a423ed51fdac2a05b55bb242180ccba3b7f661eb0a010f2966ab72fe0e6a0bea8d3d07e55c2e","ssdeep":"","tlshash":"8631f7b57bb6f5d50685c4c3725e4eb031c5fe2ca294134a7efe980e97ba085100988a","first_seen":"2025-03-17T17:56:16.942753Z","last_seen":"2026-04-29T23:30:42.187438Z","times_seen":14,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-home-Home.C5KUq5WP.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/pages-home-Home.C5KUq5WP.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/index-Ccu6oc9r.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-41e12\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5ckd6CjnJ4w5KKwaPgiowoRYW1GtAXUirpZ9f57o0XEdcpWhnzoN2g==\r\nage: 8004\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":269842,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (50488)","md5":"95bfab0536fb2999f84eb15a4bfba0d8","sha1":"634085b76e61d2e9554a6a0cd59e2b910b4f22aa","sha256":"e2831b767d4c19faaf183adbcf83e1ae234264b08bc10609167b27de10a05086","sha512":"a40c7925889658bcd1dfc1699ec0375b99c34e3ce5dc75a12aaab4d0aad42943a63488878bd0923bd415ba0f6fe4eaf60b147617634874f28b06d5eb17d5c591","ssdeep":"6144:UgIyvMuamz2sOAPJH+LoFVIJix/TPrnPt292/ObvXLmxS:D/MuamqRUJeLHix/TPzPt+2/ObsS","tlshash":"ab4428c9b255f03543f3249a40ab4001b37a1e49b80994d4b0f9acaa797ed5862fff7d","first_seen":"2026-03-17T17:43:41.154303Z","last_seen":"2026-04-29T23:30:42.081458Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/DepositWheel-BiMfHNhs.css","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/DepositWheel-BiMfHNhs.css HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-57e5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0EXbGDE51RLs9-qceHTPi4c4k3kmIf9q6vuS6v1cv26pzUCTPmgH8Q==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22500)","md5":"d219fc9fabcac402a6cbfd94b21e94f1","sha1":"c59734554d1610eed64c4e9c95283e2342fa0141","sha256":"2384c97fcd377ba4ed946cc13fe1735bc1fdda466cb15eafa79429fa898d5796","sha512":"bf2376cf0a719dbaa3b2a3bbdb3a3330bb10b8c71d51a1aca7bd72a8f86244087330bfd97ad224d7a12b6e39fe86a197f27add048ec20e1c8544e68eb59cc0c5","ssdeep":"192:18CwjqySUwkoAL9xk/sRVPwLXtv8KVcXkkL6kpPiPdPP8PKPZP5P5PQP/P5PTPs1:17wjqybtjL9dvPwLXBHWXk5d","tlshash":"b8a28a5e7b5e16d8b0fbcb6a65e1278c4540fbf6830315ada7c32a12cdc76c23821679","first_seen":"2026-03-04T09:22:28.759489Z","last_seen":"2026-04-29T23:30:42.119227Z","times_seen":14,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/pages-home-Home.C5KUq5WP.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:46.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/pages-home-Home.C5KUq5WP.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://seven7.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\ndate: Thu, 23 Apr 2026 13:21:23 GMT\r\netag: W/\"69b6c9c4-41e12\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Os2Lr5JBG-ZK1pN8IPdS-WqNtsODIoYpp3h5am14mnutilPt6SGWZQ==\r\nage: 8003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269842,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (50488)","md5":"95bfab0536fb2999f84eb15a4bfba0d8","sha1":"634085b76e61d2e9554a6a0cd59e2b910b4f22aa","sha256":"e2831b767d4c19faaf183adbcf83e1ae234264b08bc10609167b27de10a05086","sha512":"a40c7925889658bcd1dfc1699ec0375b99c34e3ce5dc75a12aaab4d0aad42943a63488878bd0923bd415ba0f6fe4eaf60b147617634874f28b06d5eb17d5c591","ssdeep":"6144:UgIyvMuamz2sOAPJH+LoFVIJix/TPrnPt292/ObvXLmxS:D/MuamqRUJeLHix/TPzPt+2/ObsS","tlshash":"ab4428c9b255f03543f3249a40ab4001b37a1e49b80994d4b0f9acaa797ed5862fff7d","first_seen":"2026-03-17T17:43:41.154303Z","last_seen":"2026-04-29T23:30:42.081458Z","times_seen":8,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game7p.u444.us/agent/redEnvelopeRainInfo","fqdn":"game7p.u444.us","domain":"u444.us","tld":"us"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:48.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"u444.us","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DC:52:A4:E1:B3:00:B5:54:A5:BA:2F:63:83:12:BF:03:AC:7A:7B","sha256":"F8:EA:46:B2:64:6A:DD:9E:F9:29:E1:AE:E1:C2:0A:46:89:98:CD:72:0E:8A:AC:11:C2:4D:63:71:03:92:25:97"}}},"request":{"raw":"POST /agent/redEnvelopeRainInfo HTTP/1.1\r\nHost: game7p.u444.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjaGFubmVsX2lkIjoxMDAyMywiZXhwIjoxNzc3NTYzMjg3LCJ1aWQiOjQ2MDAxOTI2fQ.V4zqnQtL9MGEty5spu2Ns9NbVmuYlzQ3za9c1TLP368\r\nContent-Length: 137\r\nOrigin: https://seven7.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"sign\":\"4663a7dee731e028e24dfdf571dc12bb\",\"uid\":46001926,\"time\":1776958488010,\"rand_str\":\"cc937a596a4146fbb6dec4f1a1566a30\",\"lang\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 228\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-origin: https://seven7.vip\r\ndate: Thu, 23 Apr 2026 15:34:48 GMT\r\nvary: Origin\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: comwQYCM5FWH-1jxYpeUCAXoVPQJkayZtGAwutwazAQyzVAmXipCRg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":228,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b36e49b13d6a00015e6e092974c09bbe","sha1":"78d1ce43a6da83431c82dbb622a27c30007eb21e","sha256":"49ca323dd47d29d46b02aa858984fe6016fc917c92af0d0ef757b2acbe05bfe4","sha512":"fa8add6d6dcfd78207de6f1f2c3d51179af4b0fc9a3e2132327dfb60b91e9c59f9e5eb1972f7afe0016049ae2f8a04611e9d27057a28a12529fcf48234e4108b","ssdeep":"","tlshash":"46d0125754280a68eb339261732e7bd99669c107be454dd4efcc2a1cc7d0874661cf37","first_seen":"2026-03-04T09:22:28.700541Z","last_seen":"2026-04-29T23:30:42.180685Z","times_seen":8,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"game7p.u444.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seven7.vip/assets/Notice.WQTXd983.js","fqdn":"seven7.vip","domain":"seven7.vip","tld":"vip"},"ip":{"addr":"54.240.174.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:47.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seven7.vip","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:DE:2A:F5:43:52:32:DC:B6:A1:9C:A0:64:B1:45:A2:54:34:52:F1","sha256":"05:C4:8A:DF:C9:99:D7:E9:F6:5E:17:4D:74:9F:11:24:5D:F9:25:23:89:26:45:C5:55:3F:1C:AB:57:B7:69:D2"}}},"request":{"raw":"GET /assets/Notice.WQTXd983.js HTTP/1.1\r\nHost: seven7.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/assets/pages-home-Home.C5KUq5WP.js\r\nCookie: browserCode=dfaae9cae854a313c03fe591012c2ac1; _fbp=fb.1.1776958486.2526155038\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Thu, 23 Apr 2026 15:33:22 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 15 Mar 2026 15:01:24 GMT\r\netag: W/\"69b6c9c4-7ec\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kaifdIi8_HzX0aBmA_5Aem0ENpp-ZIzH9gD3qgvuZyzvELki3fuG4w==\r\nage: 85\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2028,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2027)","md5":"ffba2cd6634507c0f872446195b8f703","sha1":"b68a3deff41250493cc0555b06013cc0e4688c17","sha256":"30d2489351411847da00d6426f88d0e4585c8f08e4e0f1ec9d2522aa1c6104cc","sha512":"403f3191f53bcb39e3fe09b2228523a529ce1de25a9b73077288129d9d1f3031f69ca48efd272fd50d702d787443a0278b1d5a78d18c038ddababb3c413e31b2","ssdeep":"","tlshash":"3641615ee861c6b183e5dcccd4e0001791272fd90130c6a0e1ff9e169a7ed22e166f29","first_seen":"2026-03-17T17:43:41.188503Z","last_seen":"2026-04-29T23:30:42.041401Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"seven7.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.us-east-1.amazonaws.com/phecda-newus/popIcon/BHdownload/0d8f8a3be2deb7eb0769b22612a1c0bb.jpg","fqdn":"s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":""},"ip":{"addr":"16.15.252.149","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://seven7.vip/group.html","date":"2026-04-23T15:34:49.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /phecda-newus/popIcon/BHdownload/0d8f8a3be2deb7eb0769b22612a1c0bb.jpg HTTP/1.1\r\nHost: s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://seven7.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 531Vb9F/CaQ4XkWaqoqWBx1lUWxzokX72MJre4+6QS4rxImvVwU3d4fV36l7rcLapCbWTgybB2o9pV7UopJp5qMjOcHmx4x1\r\nx-amz-request-id: ND7ES94A1CJ01YRC\r\nDate: Thu, 23 Apr 2026 15:34:51 GMT\r\nLast-Modified: Wed, 10 Sep 2025 04:17:30 GMT\r\nETag: \"894a17a15c2a32092447f9deaed03e5e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 14349\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":14349,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 196x215, components 3","md5":"894a17a15c2a32092447f9deaed03e5e","sha1":"358c6033eb96ce500106dfef273be2a7d18cc197","sha256":"cb6435bc0c6a36bfb852dc3362ef94846a1004c0d0d2169a06d8b13d031a291e","sha512":"8463ac43c2629ecf95012d7bf075540d2b4ea61ecd38634f4525bedf008cc052b851b9ed8f156a1318b20e8b308f98d1e593aeeadaaa5b0f6f53ac93982bd750","ssdeep":"384:hYNg7NOtRj9ubfihVQmuOxTXsmyUc2/IAyTb:hYyh2UYQHUXst2AZb","tlshash":"3552afb79efb9222d76fe17814e2b7d1b2f86735b3c07a896011a2210a852c45e8e144","first_seen":"2026-03-04T09:22:28.679821Z","last_seen":"2026-04-29T23:30:42.143102Z","times_seen":10,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":535,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}