{"report_id":"69a92c7a-c5c6-4563-8b20-f877ba18fa23","version":6,"status":"done","tags":[],"date":"2026-01-05T19:13:50Z","url":{"schema":"https","addr":"vutabox.xyz/","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"104.21.23.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vutabox.xyz/","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"title":"VALORANT PROTOCOL DROP | Exclusive Skins","dom":{"size":147593,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24706)","md5":"6f3ec1b832c7b287d27a711fecba46b6","sha1":"0c48a6b916e95bacc878d093497adfa06d09becb","sha256":"31ac0fe1c191271e8c3c2fa724be857302a4414c24e85ee3e8b751fe3454e55d","sha512":"50a767e724949033df95d38501a5a1f66ae4b8330e91241b4a08aaf35fa05c6b052330c59eb6e6ff71f746bc09466086eee6ba744aaac959dce8fa1538ea002b","ssdeep":"1536:EwjJf4H8be46G8c6eFT6Hru61WeHSKAPw6zvg12yscm2/N:EM4Ke46G8c6eFT6Hru61Weyj3b2l","tlshash":"9ee343a162e4103f80569ed3a17a5f1e69b1d55bea62150833bc07d28fb9e93fc37138","dom_hash":"domhashe3d5f5b7745fdd17ff4f572a99d86019","first_seen":"2026-01-05T19:14:06.257033Z","last_seen":"2026-01-05T19:14:06.257033Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"vutabox.xyz/","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"104.21.23.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T19:13:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"vutabox.xyz","ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-01","domain_rank":0,"first_seen":"2026-01-05T19:13:52.159149Z","last_seen":"2026-01-05T19:13:52.159149Z","alert_count":114,"request_count":38,"received_data":14851963,"sent_data":32386,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":5,"received_data":212071,"sent_data":2741,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":14177,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"vutabox.xyz/index.js","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e359403ce881a4532f37b18b700de76","sha1":"37598f983cafd918fe357d5e0b3ea9af9508e1d1","sha256":"2cb79f974371c53cb4dfa09f7b884770ffa3b906ca36d5007cf08a56255eeadf","sha512":"56b39e0d08aa08e4a6d3da31666e4682d97746be36717ad32b3745c8eabad57a7d7fcc71c5405f1fc2cab62bc386bd6a8c9552d7433e5865c9a778fadb338277","ssdeep":"768:+wsCChyj4G0TNZAYM04JDBX3UBW0ZqDW+vFEOOzyQURZMnQGeXOot+vqL5:+/0TYqL5","tlshash":"e913a4402f80d2ae330b5bbf7a3795d4e6180a4779444b97e358fc08988a267fafd171","size":44749,"data":"","first_seen":"2026-01-05T19:14:06.269265Z","last_seen":"2026-01-05T19:14:06.269265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/app.js","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c3193fdda21e5c7a3fdde606e4b9bcf","sha1":"e2c38615b911c8de5c18f8328032b14364683177","sha256":"88efcdcc05cfaa7bc7a16e6244e2c65d9b006ca78d91f24b3aa701d6437ac48d","sha512":"10436c0fc8f306c44d1ba0c90fbc876827cb9157db358c489d123646a90d0a238503211bdf0dbbefba1d084a3d1984175b61b5d7268658aed94f2a5468739626","ssdeep":"768:2we4AVQSGkd6MKrVCRYXKRI35Oj/qR5zZz1MbkujzddXPOFJFen999q+nTGnMBEp:2EjSGmorn35OTuzh+OFJFen999q+nTGt","tlshash":"502396c0ae40eb3c2302da77793aa8d5e6180b4e65c54b8ae14cfd1952ca727f9fc535","size":47801,"data":"","first_seen":"2026-01-05T19:14:06.287458Z","last_seen":"2026-01-05T19:14:06.287458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac674b32c072a9db01107079b7b2adb1","sha1":"86a8f57fd37660fa0fa7879b71480ad488e8f491","sha256":"1ce62d5d91df7e314ea690f682f351f92385931cd4b0f1e8d6294e268be30492","sha512":"2243fb920ac274d802a5bd692f410a9f3566d3d83d8d91bd868704089b0b5bbe985fd23d4ba8a7806d92311e6ba1b7b485682c9daf0706619769a4f25338b238","ssdeep":"","tlshash":"b521ab5810e31536c267b0ba8b5b9006f233a8976194fe857e8d53406f97a5407f19ff","size":1116,"data":"","first_seen":"2026-01-05T19:14:06.290528Z","last_seen":"2026-01-05T19:14:06.290528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/glitchpop_dagger.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/glitchpop_dagger.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160535\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"20f797-19a182db86d\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAZ%2BNa7X8EqLwAZzKhpZbsckNiIQ0Ioz%2BAIipheenVopeOK8i9kTP2lQopK%2BIn%2Bg7VhN8X%2FC1xlc5y031MBbdlM11F3H8yMN35FD\"}]}\r\ncf-ray: 9b954b0b2a0575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8192 x 3126, 8-bit colormap, non-interlaced","md5":"446f68357eddff376d99ffe1ad0065bc","sha1":"362c0cc3adfab9f982bd90e183b19e69a5906afa","sha256":"2469a73a392448f872c660a2e4519a526c518a26249b670dd12541961a5d37fe","sha512":"7b9913962e1bf398b95c6d88ac194eb8ec2edc6bbc12b7ae54924f79a95609058761a270c4796744040ab974b2e2824ffdff93b8e91f18531498fcc68159d226","ssdeep":"24576:Ohli9WjuX8XCuiY8QD3r29qUCg59O1Kz3x5cKn845:I0WjxSrQ7a9g+eKDxg45","tlshash":"6525228d56a61b38f0ce103356a36413d327b22be57181b3932a3559bc8fbfc529476b","first_seen":"2026-01-05T19:14:06.258069Z","last_seen":"2026-01-05T19:14:06.258069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":368,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T19:13:27.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zoAKPty6AZSz0nDAkkoP7EIDek3zXYP7eNrFXNvwp22RBv2TEgY4KQ47rsaC6%2Fe3vNyLC3A%2FFpRe0R24IwWfIm2Zqw8dKSt4A%3D%3D\"}]}\r\nset-cookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; Path=/; Max-Age=86400; HttpOnly\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b954b05af1d56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70970,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24706), with CRLF, LF line terminators","md5":"b83a4d4ae040c16ac98932754a6534ba","sha1":"4d38ebd50aa7ad6f0995da133a9169ecebea0cef","sha256":"26de8f5b5f729372b2a648ee6507a28191c92b5bea15a55303cb71725ae2fcfd","sha512":"669bff529118dc4b4d21107ef1236a96a43a292ed1f35e3286a3b14f902494d7db3be7b04289e70fbcdbe7306dd03b3d44516fe74814da89fa82f8cf2e614147","ssdeep":"1536:Xwj5SHvwqLJxdIJjO/JEY6JDrrHmAPw6zvg12yscm2/k:XsSoqLJxdIJjO/JEY6JDrrX3b2s","tlshash":"9c63763155d414258073dea5ba76af2eea359093ff520d0c339ca7f28fb6912ed2b508","first_seen":"2026-01-05T19:14:06.267188Z","last_seen":"2026-01-05T19:14:06.267188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":78,"dns":56,"connect":1,"send":0,"wait":151,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/index.js","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BkNMjF1y3e6Cxnnnk4gvKnp4GmzhslOOTW2SsoBvc8%2FnNW4TQpLJ0O8Y5zMPshdRNvpJwKe5U%2BurwwKbZP8vHQU9MEUDTmekAbI\"}]}\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 25 Oct 2025 08:44:41 GMT\r\netag: W/\"aecd-19a1a8a9536\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b954b0829eb75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44749,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44748), with no line terminators","md5":"2e359403ce881a4532f37b18b700de76","sha1":"37598f983cafd918fe357d5e0b3ea9af9508e1d1","sha256":"2cb79f974371c53cb4dfa09f7b884770ffa3b906ca36d5007cf08a56255eeadf","sha512":"56b39e0d08aa08e4a6d3da31666e4682d97746be36717ad32b3745c8eabad57a7d7fcc71c5405f1fc2cab62bc386bd6a8c9552d7433e5865c9a778fadb338277","ssdeep":"768:+wsCChyj4G0TNZAYM04JDBX3UBW0ZqDW+vFEOOzyQURZMnQGeXOot+vqL5:+/0TYqL5","tlshash":"e913a4402f80d2ae330b5bbf7a3795d4e6180a4779444b97e358fc08988a267fafd171","first_seen":"2026-01-05T19:14:06.269265Z","last_seen":"2026-01-05T19:14:06.269265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/oni_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/oni_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 30281\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"7649-19a182db9a1\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0u3PF92tTDCwC%2BuDBcBE9QIclXugaECiEPinA9%2FG%2FhgHesZPyUl4ceSsu7pq05CA168%2BVh1XzKtSEszvemSPuB9Ts631grHEgab\"}]}\r\ncf-ray: 9b954b0b3a0b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ff55c9b55b8f145873965b6a00591f0a","sha1":"c6172f03ae39b0706039f0f663f9e3f274ae2701","sha256":"107e6669da3312c2cd4b2a0f4b8c3be7c8e79da5e6687a2dcb3a1ccff484e7b1","sha512":"ab384d3513a73fb5807971b341afa837883cd5ec18f8b0b32f643cce5d862c4f7e840aedc50451ffd3af6b085d03b8272c401b2b1bf7d36be82a38599533a512","ssdeep":"768:vDT8arzhPpfFstaBjqTve+XsAOdxcNpOeHf8kA:PDHhPpfFQaBCveNFD+pO88L","tlshash":"add2f15687daa795f1732d3588dd03e38306f4b4c0c31f2a57893a09a6b9ebe9c40c15","first_seen":"2026-01-05T19:14:06.270436Z","last_seen":"2026-01-05T19:14:06.270436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/sovereign_sword.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/sovereign_sword.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 36770\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"8fa2-19a182db5bd\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4oloMmv3rCQT3xihhG%2BJnW5OHg0e1TOU3eKicubvvtwvpH6xMXNprqbCg5fG8%2BC0kTE2bTGAfYEtdqalMV4Z8jDP5R5R3RgSQ3k0\"}]}\r\ncf-ray: 9b954b0b4a1275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 146, 8-bit/color RGBA, non-interlaced","md5":"27d0c5413724247d4d141a7cdb0a2578","sha1":"356918bc4101b0951768ff106633cf712dc7845c","sha256":"d5c596bf0cc3a188ddb031d60819f156df3e89628b2f184b0e5d2d1646827d99","sha512":"637130b82882c8b14dd4f8eae15d712c480b6eacacc7115f0fa3adbebb0eef202db6e56e2eac908e7810c56403fed5136fc88ce1a4df4cdac2d40fc7bc1a65a9","ssdeep":"768:MBXjqUsny/mI/e1KQYFZFeChXAJ17RubKDa8gxfxq2nL11:MBxs1f1KBFZF3hg1d2KDa8mfc2nz","tlshash":"80f2f1e73868c7f6643b2212c64296ebfa93f0cc3aad43dab515044234b55cb24599af","first_seen":"2026-01-05T19:14:06.271678Z","last_seen":"2026-01-05T19:14:06.271678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1240,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/prime_karambit.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/prime_karambit.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 72267\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"11a4b-19a182db72d\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FbEm840OdPf7oX%2BWHiIYuABXdoHPPmImmd5L%2BANnaHV%2BMJ%2B4rXeWwkxdq6CUsnbKyzLzpr18w4s4K%2BZnd4xLX2FgbcaV4GiRSRL\"}]}\r\ncf-ray: 9b954b0b4a1375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 276, 8-bit/color RGBA, non-interlaced","md5":"e526266cce510f7c2ce55a3e9ee36c7b","sha1":"09e3bf01597ecf5fef67d8b1e90790650770ee28","sha256":"a08d668ce14cf64aac866ddb1824c4c05688fcff5f9ef7bceca0789858aa76bc","sha512":"b1fbf16da550080f505f6e7ee8863af3e6368474d8643aca0b727e81812f308449b833256468c9ee5760674425757a35e6e558fdcd7735f90859a070b0e0bd0c","ssdeep":"1536:JhyXPG9BDOggWTzqnQI4N9E7fSBMRPZhOkQzFsZP9nA3rsP:YPG9B6gnTMmU7fSBMZZhO/FsZPxkrsP","tlshash":"386302a375b3cbbf8f40d71a1d092d8e1e169b1f06e6e8f1ec23299f97097a80c56114","first_seen":"2026-01-05T19:14:06.272641Z","last_seen":"2026-01-05T19:14:06.272641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/ion_operator.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/ion_operator.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 179719\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"2be07-19a182db7dd\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mtwmyRaCjZx4heFgSNIJPct8bXXkqORgz7QQFNdlvs1fpJBAmKhx6Gmr7PZ3fCfJbtnl942trWRMMJ70B%2Fe0vCSOWtylqnnXW0UL\"}]}\r\ncf-ray: 9b954b0b5a1c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 495, 8-bit/color RGBA, non-interlaced","md5":"50c422de865546ecdcb96053c7915380","sha1":"6c0f5319282343d016dea99e1af150ee2728c92a","sha256":"1e4c07da1e1b3ed8f8405f572e7a6297c4f12fb1f7afd42e41a514d0f07fee49","sha512":"d4091d45cf92614483e190c8798e0c6d684812c88970a7227faf5055d76b46e63b6afd046d05ac78a6e081efcb2d645be7e50ff44ffc1deae1a4495cd64478a0","ssdeep":"3072:wyN8Y0Iru85LhWSAXmcwczaSVE+nhiMP1Xp6stFchGF9ZihvJLe8Qu9fcbSHrQqZ:wyN1LQdwcznF1N6S9mQuBcwMqLa6","tlshash":"9f0412f9abbedb84d52a32f76eb8509184a232b02027c1e84763746ff754023e763755","first_seen":"2026-01-05T19:14:06.273892Z","last_seen":"2026-01-05T19:14:06.273892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/favicon.ico","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:30.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:30 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YfRhIAWhX9kEGQisK2xCNj%2FXcVTaMYdKZOmz%2BehWi%2B3hYtxPj7ypHmEuYyslsrrVwCvQcDFNAPDKrEd2d0s00fyD%2BpdVbXLd4pfV\"}]}\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"4246-19a182dbcb9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9b954b134a7075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16966,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"4439c3e9e6302ff680c5291463f5b902","sha1":"030a23e266c827a0397affb458bf782428a47d99","sha256":"948b40a28b72f8c339f6431802d2e986034654094760e3c525dc2a4511903e8b","sha512":"c41ff3d825c0c414e0e86ed512a78b84677a1870b908122fdd1224368b8c09f933bf38335aa2c3764e829f8850baac8d9ff87d1f8a333278d52a0a5ff20e2ae8","ssdeep":"192:bb2XEooq5+JXD3Pgvj7h12N8vqOb5tGZsh16TPj1PuDunbQqBOJljBs1kI:OjQJz/gBo+q7mkZWqUAOvjB8","tlshash":"02728d5f1a8649e1e5f2427253628e0d68e70b23e07e64b0f5f45572b9f27b27c28933","first_seen":"2025-11-01T22:50:54.472244Z","last_seen":"2026-05-23T13:17:07.612966Z","times_seen":79,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/oni_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/oni_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 30281\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"7649-19a182db799\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIXFOXxNNZOe8L9fHyr%2FQmVwFhpwYmNVSnchzoJhUt3zJBWY5Es4qe3PUSKT4EfkLBfv%2BB7lN7im7VKWWYbG2wsrafpG1nncUhkV\"}]}\r\ncf-ray: 9b954b0b2a0375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ff55c9b55b8f145873965b6a00591f0a","sha1":"c6172f03ae39b0706039f0f663f9e3f274ae2701","sha256":"107e6669da3312c2cd4b2a0f4b8c3be7c8e79da5e6687a2dcb3a1ccff484e7b1","sha512":"ab384d3513a73fb5807971b341afa837883cd5ec18f8b0b32f643cce5d862c4f7e840aedc50451ffd3af6b085d03b8272c401b2b1bf7d36be82a38599533a512","ssdeep":"768:vDT8arzhPpfFstaBjqTve+XsAOdxcNpOeHf8kA:PDHhPpfFQaBCveNFD+pO88L","tlshash":"add2f15687daa795f1732d3588dd03e38306f4b4c0c31f2a57893a09a6b9ebe9c40c15","first_seen":"2026-01-05T19:14:06.270436Z","last_seen":"2026-01-05T19:14:06.270436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/sovereign_sword.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/sovereign_sword.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 36770\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"8fa2-19a182db5bd\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpZW1129Q%2FvGdPYsLdp17CgXJJpph1amyysED7hukTqeFbbc1iW2kg1gddzE2HK6OSdzRr12COPPtKDx%2FZlhNli%2FZo%2FLqJQewzdx\"}]}\r\ncf-ray: 9b954b0b3a0675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 146, 8-bit/color RGBA, non-interlaced","md5":"27d0c5413724247d4d141a7cdb0a2578","sha1":"356918bc4101b0951768ff106633cf712dc7845c","sha256":"d5c596bf0cc3a188ddb031d60819f156df3e89628b2f184b0e5d2d1646827d99","sha512":"637130b82882c8b14dd4f8eae15d712c480b6eacacc7115f0fa3adbebb0eef202db6e56e2eac908e7810c56403fed5136fc88ce1a4df4cdac2d40fc7bc1a65a9","ssdeep":"768:MBXjqUsny/mI/e1KQYFZFeChXAJ17RubKDa8gxfxq2nL11:MBxs1f1KBFZF3hg1d2KDa8mfc2nz","tlshash":"80f2f1e73868c7f6643b2212c64296ebfa93f0cc3aad43dab515044234b55cb24599af","first_seen":"2026-01-05T19:14:06.271678Z","last_seen":"2026-01-05T19:14:06.271678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1145,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/reaver_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/reaver_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 632426\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"9a66a-19a182db6a1\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNoEWqDtJ92W3KAPrDVQ62pHX%2BJo1Vatx7CvuA4UK4hSFxVOQJipxmlbfIHjNVQt5LyQqdq80fui%2FIF61Y8t%2BjjbYSxLWCwHvH67\"}]}\r\ncf-ray: 9b954b0b3a0875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 502, 8-bit/color RGBA, non-interlaced","md5":"af4308c6c12fe17159e20e77dc680a5e","sha1":"34c5c90668197f51d74489e80b9585861e5860d1","sha256":"cf94d4418cb482a5e8ac3243537d5b896ac6c9cf8e63f99ab259f77b655ad146","sha512":"dedfed3e0c92a13091ce1c6f20767f6086648285634847428b4f2b44a07721246086d3c0b61e30c114b10a0faf96013867754d0a29ffe37d2967c4236982988e","ssdeep":"12288:HJHuas26p+XgWvHdeLA7VqUAXdHdIoj2HGPMzWEJ6gSgXcQ/Rr:HJOpLp0gL05EolHGUiGBS+cIr","tlshash":"69d4233d6eadc43953de1cb2d78108be8a6a303b325784155fc679f112e7b508ea178e","first_seen":"2026-01-05T19:14:06.276762Z","last_seen":"2026-01-05T19:14:06.276762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/prime_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/prime_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 10627\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"2983-19a182db959\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMcqbPumKrMJ2UJyUpU9uv6CUHoykuvuOU2AjJ6FT6D0qqF3jNKka0JJ%2BBw5%2FSoD4bskHUKumm62eihdKJemYcQbyC5MdC58wLtV\"}]}\r\ncf-ray: 9b954b0b3a0975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10627,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"d72a0a2b20237b123b1f3fb3add09168","sha1":"a083a93e47aa640c93845b64424598fa36a307de","sha256":"fdd54c7867fbcf8ebe7ba2a568a4e470aa8a4344163f659009682aa842c35ebb","sha512":"7bd999b385b06303c218c45ee63675f5823e4815adbf7832b403e5cf6e940443ec6355297e52a75d6e642590496db97c8aebff8e8621ec73d2ee50b889fc7613","ssdeep":"192:rGJWkwe3mPIXGXbRtxfPjP2wT+ifDS/yOtQ6NUpTruwAol3YSxptlCiMgELi:rqwPwXKPbF+ifDIQ6Aua3bpG4EW","tlshash":"ef22b058b2a87e52c2e8473de8909bb97768234534e95b08c9b1b376c1593df442cc3f","first_seen":"2026-01-05T19:14:06.277851Z","last_seen":"2026-01-05T19:14:06.277851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/singularity_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/singularity_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 164010\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"280aa-19a182db61d\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ss%2FmG3yvVDX9LLrYMzFOgoXwN6KtrVGCDgUuaBRl9x2giIUJwM4Yrr9l%2F0Ehq3diM5Fa0h3DsmRIa%2BHeBK07yUPFGd4Svj5k1WLJ\"}]}\r\ncf-ray: 9b954b0b3a0e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 380, 8-bit/color RGBA, non-interlaced","md5":"5a324e1a90ff413ab8fa3f2556c7eec2","sha1":"e405f59746d9f041c90c18f79761eb19d81a957d","sha256":"4aa08cc476af482c15818b633a62fd58e837722123c92beb1f24b94d9cb65dc9","sha512":"ad4675f8a57f3c37d3ad99ea4ee2d4ead1fa0c182f7907ebf1a16f5f861a626b5b8d42c44edcd09fccf38f5b757b4ccc3e348e938de8b855a6f90a9448e4e935","ssdeep":"3072:Swx3Z8BF71pNnE94HMYEV5H7cL+sQ68O4FI2SVfGL8LX:ZfgvNntKH72f4C2Shfr","tlshash":"b1f3127c8976e9998c6ff23286a06f5356d7023577f90cf4c8cc53d80ae7c2250e2a99","first_seen":"2026-01-05T19:14:06.278863Z","last_seen":"2026-01-05T19:14:06.278863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/singularity_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/singularity_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 164010\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"280aa-19a182db61d\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Td5cQCgpe0NwN91%2F9Du%2FWn8g8lf%2FEJUWWLsAAvURDrKP1G5EC1JzJecG26lUgdM%2BfzknO661R8gkyVImg%2BMsZF9S3%2FFkI7u5tCCD\"}]}\r\ncf-ray: 9b954b0b5a1b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 380, 8-bit/color RGBA, non-interlaced","md5":"5a324e1a90ff413ab8fa3f2556c7eec2","sha1":"e405f59746d9f041c90c18f79761eb19d81a957d","sha256":"4aa08cc476af482c15818b633a62fd58e837722123c92beb1f24b94d9cb65dc9","sha512":"ad4675f8a57f3c37d3ad99ea4ee2d4ead1fa0c182f7907ebf1a16f5f861a626b5b8d42c44edcd09fccf38f5b757b4ccc3e348e938de8b855a6f90a9448e4e935","ssdeep":"3072:Swx3Z8BF71pNnE94HMYEV5H7cL+sQ68O4FI2SVfGL8LX:ZfgvNntKH72f4C2Shfr","tlshash":"b1f3127c8976e9998c6ff23286a06f5356d7023577f90cf4c8cc53d80ae7c2250e2a99","first_seen":"2026-01-05T19:14:06.278863Z","last_seen":"2026-01-05T19:14:06.278863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/oni_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/oni_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 30281\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"7649-19a182db799\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZuD99QgNPpniHpWmqw3e%2FUGQ3vnZkzsfurVGMKsnG1x%2BghfdrQ88PjUhkDBousya%2BY%2BhwV3UY4Vx5e7TZ1EMIPsgCN7szUQX5RE\"}]}\r\ncf-ray: 9b954b0b5a1a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ff55c9b55b8f145873965b6a00591f0a","sha1":"c6172f03ae39b0706039f0f663f9e3f274ae2701","sha256":"107e6669da3312c2cd4b2a0f4b8c3be7c8e79da5e6687a2dcb3a1ccff484e7b1","sha512":"ab384d3513a73fb5807971b341afa837883cd5ec18f8b0b32f643cce5d862c4f7e840aedc50451ffd3af6b085d03b8272c401b2b1bf7d36be82a38599533a512","ssdeep":"768:vDT8arzhPpfFstaBjqTve+XsAOdxcNpOeHf8kA:PDHhPpfFQaBCveNFD+pO88L","tlshash":"add2f15687daa795f1732d3588dd03e38306f4b4c0c31f2a57893a09a6b9ebe9c40c15","first_seen":"2026-01-05T19:14:06.270436Z","last_seen":"2026-01-05T19:14:06.270436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vutabox.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502610\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-15T15:44:23.211906Z","times_seen":259409,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":166,"dns":1,"connect":22,"send":0,"wait":9,"receive":5,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/glitchpop_dagger.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/glitchpop_dagger.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160535\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"20f797-19a182dbaed\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Lu11UOcFZ0WhdI1HBjiDEcpGJSbkx08JNcsPLvcMscGSnzOQadIo35PHwAh3eJ9MehNhl4MQ0fo1t3pyzOrv%2FsaqvTRsDP29QQ8\"}]}\r\ncf-ray: 9b954b0b3a0c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8192 x 3126, 8-bit colormap, non-interlaced","md5":"446f68357eddff376d99ffe1ad0065bc","sha1":"362c0cc3adfab9f982bd90e183b19e69a5906afa","sha256":"2469a73a392448f872c660a2e4519a526c518a26249b670dd12541961a5d37fe","sha512":"7b9913962e1bf398b95c6d88ac194eb8ec2edc6bbc12b7ae54924f79a95609058761a270c4796744040ab974b2e2824ffdff93b8e91f18531498fcc68159d226","ssdeep":"24576:Ohli9WjuX8XCuiY8QD3r29qUCg59O1Kz3x5cKn845:I0WjxSrQ7a9g+eKDxg45","tlshash":"6525228d56a61b38f0ce103356a36413d327b22be57181b3932a3559bc8fbfc529476b","first_seen":"2026-01-05T19:14:06.258069Z","last_seen":"2026-01-05T19:14:06.258069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":933,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/elderflame_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/elderflame_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 68849\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"10cf1-19a182db8cd\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FPmlM2YxNWJNj1MDPzAFAs9EpzYDNZ6wtCC37tlLtAFrVXdA%2FJRv6KRYInEQpQids%2FKgkKPE0ig42uSZ4s41dHK9A%2BO6JfMH8qws\"}]}\r\ncf-ray: 9b954b0b3a0d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 152, 8-bit/color RGBA, non-interlaced","md5":"c6e1a538219d61afb1439545126242e6","sha1":"f67799e094e56cbb3f04e3c61f1db62bdf8dadf4","sha256":"75ca17bf3785c80fd4e0ed38c2f4963a57eed9456f21c0b93b0bbc3d0a487b3b","sha512":"4c376c87a301e6c57b3515531ce76fe96d99e1ef625f889243db17f57ebb7ad3cf2df91d09f9faa80e43db46fb9cae6a85414b5670363a9640778a1030a38ff0","ssdeep":"1536:5CHI6KzBtOO1+inkiReiT/aQuZpla+ceyv6EytoVHZYmj:QI6ssye2ajlowhto9ZYmj","tlshash":"276302366f6334f6004d63c52b28e2f11c7b8583d827dd4828f19b9b29af7a56076b91","first_seen":"2026-01-05T19:14:06.284948Z","last_seen":"2026-01-05T19:14:06.284948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/reaver_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/reaver_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 632426\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"9a66a-19a182db6a1\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AZ0zWoJdniZbahUI6xvGR%2BY1pDP%2FtK6TBgPmWuUhUYr7pj4ufbqAcfx3zWah5JSYhrjxaMymbDbE6ZeI3rSUDFLhvTuw%2BhlLHFL\"}]}\r\ncf-ray: 9b954b0b5a2075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 502, 8-bit/color RGBA, non-interlaced","md5":"af4308c6c12fe17159e20e77dc680a5e","sha1":"34c5c90668197f51d74489e80b9585861e5860d1","sha256":"cf94d4418cb482a5e8ac3243537d5b896ac6c9cf8e63f99ab259f77b655ad146","sha512":"dedfed3e0c92a13091ce1c6f20767f6086648285634847428b4f2b44a07721246086d3c0b61e30c114b10a0faf96013867754d0a29ffe37d2967c4236982988e","ssdeep":"12288:HJHuas26p+XgWvHdeLA7VqUAXdHdIoj2HGPMzWEJ6gSgXcQ/Rr:HJOpLp0gL05EolHGUiGBS+cIr","tlshash":"69d4233d6eadc43953de1cb2d78108be8a6a303b325784155fc679f112e7b508ea178e","first_seen":"2026-01-05T19:14:06.276762Z","last_seen":"2026-01-05T19:14:06.276762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:30.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vutabox.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502612\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-15T15:44:23.211906Z","times_seen":259409,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/style.css","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjBdWlNhMSezvyeKs%2BySbrfMzhtPtV5b8eBvnVvMgVDxA8Ht5RbmhCcpGxeDP9IELP2q6T1GTHLA1VaJNBD3VfJZM7dmDS0O0m0L\"}]}\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:02 GMT\r\netag: W/\"dd53-19a182dbed9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b954b0829ea75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56659,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2a29190b7032a5036eeb9d581ecb0edd","sha1":"8a9dd3986d3de12d26f25ffe1a90063818bd9222","sha256":"63d40e13a348b1668783049a13aa1086ff6173459b682aaf8f908f37c7e30125","sha512":"d6e65a1cb2e7c82d89aadbf8499fabefb7e6611e0083166f0d977cc55398f22ec8f7b3254cc3a194df54d398249025f0dace80be76023a1e1a79216dfb136aaa","ssdeep":"384:hTAI1yL9wgbgzi3ArBn9ocLKZgx7AIt270AzuT5ktJk4DQ1G+g+jeL1SvFdADug1:hD1yAeArBnCx1/6ye6UM","tlshash":"054374189a001951a533e7bceff38f89f6b55023e9030a6e77cf92554fb22a84695fc4","first_seen":"2026-01-05T19:14:06.286324Z","last_seen":"2026-01-05T19:14:06.286324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/ion_operator.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/ion_operator.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 179719\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"2be07-19a182db7dd\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XEctut1cEdxXaY47xg9hO8f%2B1b3hRYG0oavUrPFHNRdBjsXCmMq4NcbfSwCibiYaagxNfF7i58MGKsr6KKG2QjC0FpAYRJcLlLH\"}]}\r\ncf-ray: 9b954b0b2a0475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 495, 8-bit/color RGBA, non-interlaced","md5":"50c422de865546ecdcb96053c7915380","sha1":"6c0f5319282343d016dea99e1af150ee2728c92a","sha256":"1e4c07da1e1b3ed8f8405f572e7a6297c4f12fb1f7afd42e41a514d0f07fee49","sha512":"d4091d45cf92614483e190c8798e0c6d684812c88970a7227faf5055d76b46e63b6afd046d05ac78a6e081efcb2d645be7e50ff44ffc1deae1a4495cd64478a0","ssdeep":"3072:wyN8Y0Iru85LhWSAXmcwczaSVE+nhiMP1Xp6stFchGF9ZihvJLe8Qu9fcbSHrQqZ:wyN1LQdwcznF1N6S9mQuBcwMqLa6","tlshash":"9f0412f9abbedb84d52a32f76eb8509184a232b02027c1e84763746ff754023e763755","first_seen":"2026-01-05T19:14:06.273892Z","last_seen":"2026-01-05T19:14:06.273892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/prime_karambit.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/prime_karambit.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 72267\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"11a4b-19a182db72d\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vp8sP5WE8c4xDv8ncfWzT3bn9e2Ci9LyH1SJIE9Dyw3KlRKsNMei11%2BFuae%2BcFqiZ9xXEBmUy%2BqwrB7B2JmeuevJTAnTbjDW2B%2F%2F\"}]}\r\ncf-ray: 9b954b0b3a0775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 276, 8-bit/color RGBA, non-interlaced","md5":"e526266cce510f7c2ce55a3e9ee36c7b","sha1":"09e3bf01597ecf5fef67d8b1e90790650770ee28","sha256":"a08d668ce14cf64aac866ddb1824c4c05688fcff5f9ef7bceca0789858aa76bc","sha512":"b1fbf16da550080f505f6e7ee8863af3e6368474d8643aca0b727e81812f308449b833256468c9ee5760674425757a35e6e558fdcd7735f90859a070b0e0bd0c","ssdeep":"1536:JhyXPG9BDOggWTzqnQI4N9E7fSBMRPZhOkQzFsZP9nA3rsP:YPG9B6gnTMmU7fSBMZZhO/FsZPxkrsP","tlshash":"386302a375b3cbbf8f40d71a1d092d8e1e169b1f06e6e8f1ec23299f97097a80c56114","first_seen":"2026-01-05T19:14:06.272641Z","last_seen":"2026-01-05T19:14:06.272641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/oni_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/oni_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 30281\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"7649-19a182db799\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ex7nz9TCgZ7yIIX0gIwJrp%2B4AUGtDYiZBkJ4aQIOnYYR61bNHjShrlE9Zxeo22X5scOJQx8e%2F0y1trRkYr%2BKIaVudmUuGizkz5%2Fj\"}]}\r\ncf-ray: 9b954b0b3a0f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ff55c9b55b8f145873965b6a00591f0a","sha1":"c6172f03ae39b0706039f0f663f9e3f274ae2701","sha256":"107e6669da3312c2cd4b2a0f4b8c3be7c8e79da5e6687a2dcb3a1ccff484e7b1","sha512":"ab384d3513a73fb5807971b341afa837883cd5ec18f8b0b32f643cce5d862c4f7e840aedc50451ffd3af6b085d03b8272c401b2b1bf7d36be82a38599533a512","ssdeep":"768:vDT8arzhPpfFstaBjqTve+XsAOdxcNpOeHf8kA:PDHhPpfFQaBCveNFD+pO88L","tlshash":"add2f15687daa795f1732d3588dd03e38306f4b4c0c31f2a57893a09a6b9ebe9c40c15","first_seen":"2026-01-05T19:14:06.270436Z","last_seen":"2026-01-05T19:14:06.270436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/glitchpop_dagger.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/glitchpop_dagger.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160535\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"20f797-19a182db86d\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2B3loWD8WigJbBUYD8EroOXl1zsakALoTELnUif5OHZzi8wDkYrCVr6SwjyYJM94GNl%2FsP9RLcnwQGVALxeLLGWJE6iAg6%2Fwtv9w\"}]}\r\ncf-ray: 9b954b0b4a1175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8192 x 3126, 8-bit colormap, non-interlaced","md5":"446f68357eddff376d99ffe1ad0065bc","sha1":"362c0cc3adfab9f982bd90e183b19e69a5906afa","sha256":"2469a73a392448f872c660a2e4519a526c518a26249b670dd12541961a5d37fe","sha512":"7b9913962e1bf398b95c6d88ac194eb8ec2edc6bbc12b7ae54924f79a95609058761a270c4796744040ab974b2e2824ffdff93b8e91f18531498fcc68159d226","ssdeep":"24576:Ohli9WjuX8XCuiY8QD3r29qUCg59O1Kz3x5cKn845:I0WjxSrQ7a9g+eKDxg45","tlshash":"6525228d56a61b38f0ce103356a36413d327b22be57181b3932a3559bc8fbfc529476b","first_seen":"2026-01-05T19:14:06.258069Z","last_seen":"2026-01-05T19:14:06.258069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":557,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/reaver_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/reaver_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 632426\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"9a66a-19a182db6a1\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZvczritnsaLwKcRSS4x1rjzgkT2zKiUYYpUgGupdpFujiPITkrWVTQPxxmkBdE52N5FWTB2JnX2WMmrn9mKf4DAFRqfvHgkYdD2\"}]}\r\ncf-ray: 9b954b0b4a1475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":632426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 502, 8-bit/color RGBA, non-interlaced","md5":"af4308c6c12fe17159e20e77dc680a5e","sha1":"34c5c90668197f51d74489e80b9585861e5860d1","sha256":"cf94d4418cb482a5e8ac3243537d5b896ac6c9cf8e63f99ab259f77b655ad146","sha512":"dedfed3e0c92a13091ce1c6f20767f6086648285634847428b4f2b44a07721246086d3c0b61e30c114b10a0faf96013867754d0a29ffe37d2967c4236982988e","ssdeep":"12288:HJHuas26p+XgWvHdeLA7VqUAXdHdIoj2HGPMzWEJ6gSgXcQ/Rr:HJOpLp0gL05EolHGUiGBS+cIr","tlshash":"69d4233d6eadc43953de1cb2d78108be8a6a303b325784155fc679f112e7b508ea178e","first_seen":"2026-01-05T19:14:06.276762Z","last_seen":"2026-01-05T19:14:06.276762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/sovereign_sword.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/sovereign_sword.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 36770\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"8fa2-19a182db5bd\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8XxUCDtyCQ7kw8q5UasJUHiCTQNgYaW96TVceWV2tIxGZMpg9kOS8ZhOfcuJdNlcxMJF5C1uI7puz5zRH02Q3jQrRHd69yHBG2p\"}]}\r\ncf-ray: 9b954b0b5a1e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 146, 8-bit/color RGBA, non-interlaced","md5":"27d0c5413724247d4d141a7cdb0a2578","sha1":"356918bc4101b0951768ff106633cf712dc7845c","sha256":"d5c596bf0cc3a188ddb031d60819f156df3e89628b2f184b0e5d2d1646827d99","sha512":"637130b82882c8b14dd4f8eae15d712c480b6eacacc7115f0fa3adbebb0eef202db6e56e2eac908e7810c56403fed5136fc88ce1a4df4cdac2d40fc7bc1a65a9","ssdeep":"768:MBXjqUsny/mI/e1KQYFZFeChXAJ17RubKDa8gxfxq2nL11:MBxs1f1KBFZF3hg1d2KDa8mfc2nz","tlshash":"80f2f1e73868c7f6643b2212c64296ebfa93f0cc3aad43dab515044234b55cb24599af","first_seen":"2026-01-05T19:14:06.271678Z","last_seen":"2026-01-05T19:14:06.271678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1232,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/app.js","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwxTL7cERvh1N%2BOpJdMiK%2FQqyOQfYjk%2FPcks190vWLbnx%2FG5xHy0qnm4dYtzeqkpkUJQLRVvwVOR%2FEzSO%2FImM8%2B%2B8sJa72kp2LJS\"}]}\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 25 Oct 2025 08:44:58 GMT\r\netag: W/\"bab9-19a1a8ad71a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b954b0839ec75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47801,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47789), with no line terminators","md5":"8c3193fdda21e5c7a3fdde606e4b9bcf","sha1":"e2c38615b911c8de5c18f8328032b14364683177","sha256":"88efcdcc05cfaa7bc7a16e6244e2c65d9b006ca78d91f24b3aa701d6437ac48d","sha512":"10436c0fc8f306c44d1ba0c90fbc876827cb9157db358c489d123646a90d0a238503211bdf0dbbefba1d084a3d1984175b61b5d7268658aed94f2a5468739626","ssdeep":"768:2we4AVQSGkd6MKrVCRYXKRI35Oj/qR5zZz1MbkujzddXPOFJFen999q+nTGnMBEp:2EjSGmorn35OTuzh+OFJFen999q+nTGt","tlshash":"502396c0ae40eb3c2302da77793aa8d5e6180b4e65c54b8ae14cfd1952ca727f9fc535","first_seen":"2026-01-05T19:14:06.287458Z","last_seen":"2026-01-05T19:14:06.287458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vutabox.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502610\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-15T15:44:23.211906Z","times_seen":259409,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":72,"dns":3,"connect":7,"send":0,"wait":9,"receive":11,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/glitchpop_dagger.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/glitchpop_dagger.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160535\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"20f797-19a182dbaed\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2UwKrlymd3G590vJRKKpuLjUfgE1X2HrqnYNEmjJhN3mLjKRctpSLvGH7GUtHdQnNDBauW0gWyPRgpx%2FEVff%2FqYz9aP53fq1HY%2F\"}]}\r\ncf-ray: 9b954b0b4a1875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8192 x 3126, 8-bit colormap, non-interlaced","md5":"446f68357eddff376d99ffe1ad0065bc","sha1":"362c0cc3adfab9f982bd90e183b19e69a5906afa","sha256":"2469a73a392448f872c660a2e4519a526c518a26249b670dd12541961a5d37fe","sha512":"7b9913962e1bf398b95c6d88ac194eb8ec2edc6bbc12b7ae54924f79a95609058761a270c4796744040ab974b2e2824ffdff93b8e91f18531498fcc68159d226","ssdeep":"24576:Ohli9WjuX8XCuiY8QD3r29qUCg59O1Kz3x5cKn845:I0WjxSrQ7a9g+eKDxg45","tlshash":"6525228d56a61b38f0ce103356a36413d327b22be57181b3932a3559bc8fbfc529476b","first_seen":"2026-01-05T19:14:06.258069Z","last_seen":"2026-01-05T19:14:06.258069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026family=Bebas+Neue\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026family=Bebas+Neue\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 19:13:28 GMT\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13491,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"db8a9884d1129c619bdbda2236edde3a","sha1":"16f2ccea1bd90823aa21857ab931f5ae0ef3c8d9","sha256":"ad444fc1391258972268a30bc06a93f6097897a9d55f826721fa5c003aad814e","sha512":"7d287ed7ba0441f486d3bdf4ff08dbf9e747bb5d71ffc6ff87033470e44fa63cef866c98dffaa45d7c446e3ce110c379d27d14e9ada397ff1498fd7e5fe7aba9","ssdeep":"192:K1/fNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:IXuM0p2+g7r","tlshash":"20528a92002ba400ab971dc233cf7f3aaece50856485d1b95ffd0dc99cead66436875d","first_seen":"2025-12-11T00:37:31.233132Z","last_seen":"2026-08-09T08:38:07.733091Z","times_seen":39,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":156,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/singularity_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/singularity_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 164010\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"280aa-19a182db61d\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLBPVvefGZJ2NDkkCHrIJeUsjCHqu3utw6YpalHvXkchtxgmMPVZ4KX6lc2YOygCJzHIVZhF2gRhO3PEzmcZy5y3OSXED%2Fdz7JPr\"}]}\r\ncf-ray: 9b954b0b2a0275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 380, 8-bit/color RGBA, non-interlaced","md5":"5a324e1a90ff413ab8fa3f2556c7eec2","sha1":"e405f59746d9f041c90c18f79761eb19d81a957d","sha256":"4aa08cc476af482c15818b633a62fd58e837722123c92beb1f24b94d9cb65dc9","sha512":"ad4675f8a57f3c37d3ad99ea4ee2d4ead1fa0c182f7907ebf1a16f5f861a626b5b8d42c44edcd09fccf38f5b757b4ccc3e348e938de8b855a6f90a9448e4e935","ssdeep":"3072:Swx3Z8BF71pNnE94HMYEV5H7cL+sQ68O4FI2SVfGL8LX:ZfgvNntKH72f4C2Shfr","tlshash":"b1f3127c8976e9998c6ff23286a06f5356d7023577f90cf4c8cc53d80ae7c2250e2a99","first_seen":"2026-01-05T19:14:06.278863Z","last_seen":"2026-01-05T19:14:06.278863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/elderflame_operator.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/elderflame_operator.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 68849\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"10cf1-19a182dbb35\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grRWKRSdgNL4Rz0sST4nxE%2BwSbz0ddnBSULnoMW1RkcMAYx8xyTDQHoHHCcPHGQmv8Z6%2F%2FDYYWMTJQvXaU9GJqJxzZ0JUEtcyhCW\"}]}\r\ncf-ray: 9b954b0b3a0a75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 152, 8-bit/color RGBA, non-interlaced","md5":"c6e1a538219d61afb1439545126242e6","sha1":"f67799e094e56cbb3f04e3c61f1db62bdf8dadf4","sha256":"75ca17bf3785c80fd4e0ed38c2f4963a57eed9456f21c0b93b0bbc3d0a487b3b","sha512":"4c376c87a301e6c57b3515531ce76fe96d99e1ef625f889243db17f57ebb7ad3cf2df91d09f9faa80e43db46fb9cae6a85414b5670363a9640778a1030a38ff0","ssdeep":"1536:5CHI6KzBtOO1+inkiReiT/aQuZpla+ceyv6EytoVHZYmj:QI6ssye2ajlowhto9ZYmj","tlshash":"276302366f6334f6004d63c52b28e2f11c7b8583d827dd4828f19b9b29af7a56076b91","first_seen":"2026-01-05T19:14:06.284948Z","last_seen":"2026-01-05T19:14:06.284948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/ion_operator.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/ion_operator.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 179719\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"2be07-19a182db7dd\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfYG%2B9%2F99aXkuBSqvyCUtojjiFdLP4WjDUF5y2zR5MOI12d9p2ZV521ACWXHymiZv36bPQGmqphTI2KjmLQEl5Oo7657OLTIDP90\"}]}\r\ncf-ray: 9b954b0b3a1075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 495, 8-bit/color RGBA, non-interlaced","md5":"50c422de865546ecdcb96053c7915380","sha1":"6c0f5319282343d016dea99e1af150ee2728c92a","sha256":"1e4c07da1e1b3ed8f8405f572e7a6297c4f12fb1f7afd42e41a514d0f07fee49","sha512":"d4091d45cf92614483e190c8798e0c6d684812c88970a7227faf5055d76b46e63b6afd046d05ac78a6e081efcb2d645be7e50ff44ffc1deae1a4495cd64478a0","ssdeep":"3072:wyN8Y0Iru85LhWSAXmcwczaSVE+nhiMP1Xp6stFchGF9ZihvJLe8Qu9fcbSHrQqZ:wyN1LQdwcznF1N6S9mQuBcwMqLa6","tlshash":"9f0412f9abbedb84d52a32f76eb8509184a232b02027c1e84763746ff754023e763755","first_seen":"2026-01-05T19:14:06.273892Z","last_seen":"2026-01-05T19:14:06.273892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/elderflame_operator.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/elderflame_operator.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 68849\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"10cf1-19a182dbb35\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHRvdm1Rs2kJwGUEWBfLiz8Af2L%2Fp9hXMupT1qFOegBD2F3g42gFunrsu3bB2IXuhoaspmhjzg0tiTKH9vlbY6lYyv6K9pYlzYN4\"}]}\r\ncf-ray: 9b954b0b4a1675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 152, 8-bit/color RGBA, non-interlaced","md5":"c6e1a538219d61afb1439545126242e6","sha1":"f67799e094e56cbb3f04e3c61f1db62bdf8dadf4","sha256":"75ca17bf3785c80fd4e0ed38c2f4963a57eed9456f21c0b93b0bbc3d0a487b3b","sha512":"4c376c87a301e6c57b3515531ce76fe96d99e1ef625f889243db17f57ebb7ad3cf2df91d09f9faa80e43db46fb9cae6a85414b5670363a9640778a1030a38ff0","ssdeep":"1536:5CHI6KzBtOO1+inkiReiT/aQuZpla+ceyv6EytoVHZYmj:QI6ssye2ajlowhto9ZYmj","tlshash":"276302366f6334f6004d63c52b28e2f11c7b8583d827dd4828f19b9b29af7a56076b91","first_seen":"2026-01-05T19:14:06.284948Z","last_seen":"2026-01-05T19:14:06.284948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vutabox.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:39:36 GMT\r\nexpires: Sun, 03 Jan 2027 10:39:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203632\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-08-15T12:29:47.545114Z","times_seen":12465,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":80,"dns":4,"connect":7,"send":0,"wait":14,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vutabox.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502610\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-15T15:44:23.211906Z","times_seen":259409,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/elderflame_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/elderflame_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 68849\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"10cf1-19a182db8cd\"\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ftqg2wXKhlTFQqWlPDDT1tL%2FGHyjFkFoGZgz6tuOL7cqU%2FgGpTEphBg7GGZZHkWp1lOaZoAZhX%2FTMKhgDZ8wO4ciekE6i5sQVdoI\"}]}\r\ncf-ray: 9b954b0b2a0175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 152, 8-bit/color RGBA, non-interlaced","md5":"c6e1a538219d61afb1439545126242e6","sha1":"f67799e094e56cbb3f04e3c61f1db62bdf8dadf4","sha256":"75ca17bf3785c80fd4e0ed38c2f4963a57eed9456f21c0b93b0bbc3d0a487b3b","sha512":"4c376c87a301e6c57b3515531ce76fe96d99e1ef625f889243db17f57ebb7ad3cf2df91d09f9faa80e43db46fb9cae6a85414b5670363a9640778a1030a38ff0","ssdeep":"1536:5CHI6KzBtOO1+inkiReiT/aQuZpla+ceyv6EytoVHZYmj:QI6ssye2ajlowhto9ZYmj","tlshash":"276302366f6334f6004d63c52b28e2f11c7b8583d827dd4828f19b9b29af7a56076b91","first_seen":"2026-01-05T19:14:06.284948Z","last_seen":"2026-01-05T19:14:06.284948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/oni_phantom.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/oni_phantom.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 30281\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"7649-19a182db9a1\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2Fp85ojfRU3AYtdLaGCJsbVhZreMIsDi9v79jP1Dv%2BmDpDuYk4%2FK8V8JiFZ2fbd0lV33BUnIDZyNZtZiyLesXjgvd5o4OKsoTSg9\"}]}\r\ncf-ray: 9b954b0b4a1775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"ff55c9b55b8f145873965b6a00591f0a","sha1":"c6172f03ae39b0706039f0f663f9e3f274ae2701","sha256":"107e6669da3312c2cd4b2a0f4b8c3be7c8e79da5e6687a2dcb3a1ccff484e7b1","sha512":"ab384d3513a73fb5807971b341afa837883cd5ec18f8b0b32f643cce5d862c4f7e840aedc50451ffd3af6b085d03b8272c401b2b1bf7d36be82a38599533a512","ssdeep":"768:vDT8arzhPpfFstaBjqTve+XsAOdxcNpOeHf8kA:PDHhPpfFQaBCveNFD+pO88L","tlshash":"add2f15687daa795f1732d3588dd03e38306f4b4c0c31f2a57893a09a6b9ebe9c40c15","first_seen":"2026-01-05T19:14:06.270436Z","last_seen":"2026-01-05T19:14:06.270436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/prime_karambit.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/prime_karambit.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 72267\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"11a4b-19a182db72d\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HE%2FhvEZg3U1te%2FW%2BlJQzPNV7vMFSylZgHIuAosBvf5w7PDZDp8OySmcqamAhecI9pLc1%2FBdkqidFcDjnFOL%2FPKCPOcHxdXB7pJ%2FI\"}]}\r\ncf-ray: 9b954b0b5a1f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 276, 8-bit/color RGBA, non-interlaced","md5":"e526266cce510f7c2ce55a3e9ee36c7b","sha1":"09e3bf01597ecf5fef67d8b1e90790650770ee28","sha256":"a08d668ce14cf64aac866ddb1824c4c05688fcff5f9ef7bceca0789858aa76bc","sha512":"b1fbf16da550080f505f6e7ee8863af3e6368474d8643aca0b727e81812f308449b833256468c9ee5760674425757a35e6e558fdcd7735f90859a070b0e0bd0c","ssdeep":"1536:JhyXPG9BDOggWTzqnQI4N9E7fSBMRPZhOkQzFsZP9nA3rsP:YPG9B6gnTMmU7fSBMZZhO/FsZPxkrsP","tlshash":"386302a375b3cbbf8f40d71a1d092d8e1e169b1f06e6e8f1ec23299f97097a80c56114","first_seen":"2026-01-05T19:14:06.272641Z","last_seen":"2026-01-05T19:14:06.272641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/prime_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:46.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/prime_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640423738,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 10627\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"2983-19a182db959\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=172NQTlH6rPU5nHkSB3qkZSlzp2tt4SouR2mxh%2FbsOK4%2BEjjZ50SB5pYwrcc8qTb2cCX%2BP5zxzJtaH2m94Dxmhg%2B0%2BZ3SBDNZKul\"}]}\r\ncf-ray: 9b954b7b69f575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10627,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"d72a0a2b20237b123b1f3fb3add09168","sha1":"a083a93e47aa640c93845b64424598fa36a307de","sha256":"fdd54c7867fbcf8ebe7ba2a568a4e470aa8a4344163f659009682aa842c35ebb","sha512":"7bd999b385b06303c218c45ee63675f5823e4815adbf7832b403e5cf6e940443ec6355297e52a75d6e642590496db97c8aebff8e8621ec73d2ee50b889fc7613","ssdeep":"192:rGJWkwe3mPIXGXbRtxfPjP2wT+ifDS/yOtQ6NUpTruwAol3YSxptlCiMgELi:rqwPwXKPbF+ifDIQ6Aua3bpG4EW","tlshash":"ef22b058b2a87e52c2e8473de8909bb97768234534e95b08c9b1b376c1593df442cc3f","first_seen":"2026-01-05T19:14:06.277851Z","last_seen":"2026-01-05T19:14:06.277851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/showcase/prime_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/showcase/prime_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 10627\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:01 GMT\r\netag: W/\"2983-19a182db959\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nrQ2NMF8MJGg2QCpoQLUj1U2umC2zcdZIXL8weILM9PbBpnrKNF476CBJiF7OhdE74YFSSVWWmb%2FXxDHTx7Ll3RKAhLBYvNoEkB\"}]}\r\ncf-ray: 9b954b0b4a1575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10627,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"d72a0a2b20237b123b1f3fb3add09168","sha1":"a083a93e47aa640c93845b64424598fa36a307de","sha256":"fdd54c7867fbcf8ebe7ba2a568a4e470aa8a4344163f659009682aa842c35ebb","sha512":"7bd999b385b06303c218c45ee63675f5823e4815adbf7832b403e5cf6e940443ec6355297e52a75d6e642590496db97c8aebff8e8621ec73d2ee50b889fc7613","ssdeep":"192:rGJWkwe3mPIXGXbRtxfPjP2wT+ifDS/yOtQ6NUpTruwAol3YSxptlCiMgELi:rqwPwXKPbF+ifDIQ6Aua3bpG4EW","tlshash":"ef22b058b2a87e52c2e8473de8909bb97768234534e95b08c9b1b376c1593df442cc3f","first_seen":"2026-01-05T19:14:06.277851Z","last_seen":"2026-01-05T19:14:06.277851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/elderflame_vandal.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/elderflame_vandal.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 68849\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"10cf1-19a182db8cd\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPt5XyzG2Goaz2yeR7PgWxMCkTP8hIlzO2LDo2UWVB%2BfdSwlFXbBDIxDeHuNgkMLaVY9XZdUE9Yk%2BMIHo99pQg8nTFg1J4WakYa5\"}]}\r\ncf-ray: 9b954b0b5a1975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 152, 8-bit/color RGBA, non-interlaced","md5":"c6e1a538219d61afb1439545126242e6","sha1":"f67799e094e56cbb3f04e3c61f1db62bdf8dadf4","sha256":"75ca17bf3785c80fd4e0ed38c2f4963a57eed9456f21c0b93b0bbc3d0a487b3b","sha512":"4c376c87a301e6c57b3515531ce76fe96d99e1ef625f889243db17f57ebb7ad3cf2df91d09f9faa80e43db46fb9cae6a85414b5670363a9640778a1030a38ff0","ssdeep":"1536:5CHI6KzBtOO1+inkiReiT/aQuZpla+ceyv6EytoVHZYmj:QI6ssye2ajlowhto9ZYmj","tlshash":"276302366f6334f6004d63c52b28e2f11c7b8583d827dd4828f19b9b29af7a56076b91","first_seen":"2026-01-05T19:14:06.284948Z","last_seen":"2026-01-05T19:14:06.284948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vutabox.xyz/images/weapons/glitchpop_dagger.png","fqdn":"vutabox.xyz","domain":"vutabox.xyz","tld":"xyz"},"ip":{"addr":"172.67.213.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vutabox.xyz/","date":"2026-01-05T19:13:28.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vutabox.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 17:49:08 GMT","end":"Sun, 01 Mar 2026 18:47:40 GMT"},"fingerprint":{"sha1":"AD:CA:37:89:11:49:9A:8A:A4:C9:EA:A5:36:52:F0:EB:90:E2:B5:4F","sha256":"C9:31:C9:2E:25:7F:D7:4F:28:8E:CB:10:AB:B1:40:26:0E:EB:AA:69:4A:70:4A:D4:E7:5C:54:E7:A7:9D:C0:20"}}},"request":{"raw":"GET /images/weapons/glitchpop_dagger.png HTTP/1.1\r\nHost: vutabox.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: sl-session=XoLMBdheXWkqH5SATOjQHA==; protocolDropSession={\"sessionId\":\"sess_mk1jgkgv_xjkl0kn66_c913zb\",\"createdAt\":1767640408737,\"lastActivity\":1767640408752,\"remainingSpins\":1,\"totalSpins\":0,\"usedPromoCodes\":[],\"inventory\":[],\"nonce\":1,\"serverSeed\":\"5c89cef43c5ee2792f5c2c266f68a899\",\"clientSeed\":\"f9715f33a98209fabcd10c1b8f724801\",\"authenticated\":false,\"username\":null,\"wins\":[],\"stats\":{\"totalSpins\":0,\"legendaryWins\":0,\"ultraWins\":0,\"exclusiveWins\":0,\"premiumWins\":0}}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 05 Jan 2026 19:13:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2160535\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 24 Oct 2025 21:44:00 GMT\r\netag: W/\"20f797-19a182db86d\"\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FyOE7zgKvhYNCNvfwwGAWfIJMRusrYc2Cad%2FLF%2F1lYTWSF4MvIk6gs2SQkKJN46cn%2FRmhjd%2BzvV6MKi%2BZcA6ia%2BRaS1NQNG5BZo\"}]}\r\ncf-ray: 9b954b0b5a1d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8192 x 3126, 8-bit colormap, non-interlaced","md5":"446f68357eddff376d99ffe1ad0065bc","sha1":"362c0cc3adfab9f982bd90e183b19e69a5906afa","sha256":"2469a73a392448f872c660a2e4519a526c518a26249b670dd12541961a5d37fe","sha512":"7b9913962e1bf398b95c6d88ac194eb8ec2edc6bbc12b7ae54924f79a95609058761a270c4796744040ab974b2e2824ffdff93b8e91f18531498fcc68159d226","ssdeep":"24576:Ohli9WjuX8XCuiY8QD3r29qUCg59O1Kz3x5cKn845:I0WjxSrQ7a9g+eKDxg45","tlshash":"6525228d56a61b38f0ce103356a36413d327b22be57181b3932a3559bc8fbfc529476b","first_seen":"2026-01-05T19:14:06.258069Z","last_seen":"2026-01-05T19:14:06.258069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-05","alert":"Phishing Block","trigger":"vutabox.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"vutabox.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}