{"report_id":"758c0076-70e0-4781-9640-8a83576440bd","version":6,"status":"done","tags":[],"date":"2026-03-07T16:45:32Z","url":{"schema":"https","addr":"sbts.pubgypenguins.com/pudgypenguins","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"172.67.182.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/pudgypenguins","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"title":"Pudgy SBTs","dom":{"size":14039,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3055)","md5":"c5f9308b84f6217626cbe18806770123","sha1":"728ccc1e35312f1ba7c5cff594fe0a94a28416e2","sha256":"a68ed5ef45b37b135b8e7ed7020e063a5b460155d69811c674fa89978eb8beb3","sha512":"007c50ec32f9f933dbe1d3de0e7fd88b079477a31cdab56b5784efa1f90844597d208131dff5d2a48154c90ada8a2a06ae593e4e03cab97bda01571a4aaea98d","ssdeep":"384:01nPaOlC5YJuqF4J8PbX96TmKLS5X+KdUm:ySWC564J8Ph01+D","tlshash":"795208266ab70875592ba0b67fa787092e62c007c606c95dbfed06584fd7d808d733d8","dom_hash":"domhash9d0204b19d702b41439be7f7ebf05f8c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/pudgypenguins","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"172.67.182.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T16:45:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"sbts.pubgypenguins.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":7481177,"sent_data":2683,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/pudgypenguins","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdfe0bb7ff10d0c5136bd8d9a7d4b642","sha1":"c7caf39c6b1967d2a1588058bef869952885b9e1","sha256":"fbc47568586e7bde0990961249c23e229d174ca5111e7fa98f5ec2b9bb7f9dab","sha512":"a61838e891c78b0b137b05a1cd0f4632a6d969727d0020da97aa9c5afc5dc8adff7acb69110123f6a0f6b544f02d922266b5d8ee6af793e40ddac0b10abea092","ssdeep":"","tlshash":"29f0c82df2245b337cbdc47f647366df3eb3622dd2052460285bad0935b4d41aae4e05","size":645,"data":"","first_seen":"2025-02-12T05:51:34.013279Z","last_seen":"2026-05-29T02:42:04.763987Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#136","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb9af1ba1f6a1a81bab4e227961f0215","sha1":"0223d686aaf8304cc9b583dc4756d0ac7c85dd62","sha256":"b705f660db3887d2b9988268ee7258e6fb8dddbcb07ed48dfbc2715f5387c430","sha512":"5a724b56ef91767fa7c619b799bf60031f49851faa45774f0d4700aa670496492392ec50d2658950d14f218566ba3e372d3d8473db22e883dfed5a416008af85","ssdeep":"","tlshash":"5d613326fa7204705a7fa1777b9bc64525304043ea41ca9d7fbc85810fa1d806bb3adc","size":3208,"data":"","first_seen":"2026-03-07T16:45:37.882019Z","last_seen":"2026-03-07T16:45:37.882019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/static/bootstrap.bundle.min.js","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-06-13T16:09:10.19401Z","times_seen":19335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/pudgypenguins","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T16:45:09.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /pudgypenguins HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 16:45:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: frame-ancestors *\r\nx-frame-options: ALLOWALL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UN%2FObMDctB1k6V4qGJiOgszt8hBprx7GZ2jpe5xd%2Bknx4r4%2F8dBK10IWcmWYveBSr7%2BiBb%2FD8FlA2Y3Z1%2Fg3MQprT804%2FmVlpFXqpz60i9UFnR%2FglLM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d8b11a60fc576a9-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":7084409,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49922)","md5":"aad990bef2d31da0d79c699f79749905","sha1":"d8ac6d3ad9b69bfa178d3f383ab0273ed1822d73","sha256":"62bde1f725eb58342955269ab566260b4df851fafd75e958f2cf6cea38e9a5f4","sha512":"c617e45adb403ec09d5136f49c8cff0726a1510cb685c16e8acb65d9f2076479b52caa0528d0f410a37c060e790cae8310f3fe69975ae750180a256a5bd628e3","ssdeep":"24576:IEeW5AcEeW5ABEeW5A6EeW5A/EeW5AAc2mrMO2DraJ+nDXGiHyY:IEscEsBEs6Es/EslRMXfC+nDWs","tlshash":"09252377051e163e849e4717b2e30f05afa22f1b8c409addf9ed11da6bd66420b5b03e","first_seen":"2026-03-07T16:45:37.848783Z","last_seen":"2026-03-07T16:45:37.848783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":94,"dns":66,"connect":8,"send":0,"wait":395,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/favicon.ico","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sbts.pubgypenguins.com/pudgypenguins","date":"2026-03-07T16:45:11.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/static/bootstrap.min.css","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sbts.pubgypenguins.com/pudgypenguins","date":"2026-03-07T16:45:11.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /static/bootstrap.min.css HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:45:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 09 Feb 2026 01:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXpHxyqpW1YBCgP%2F0dHSM3cY3TcfP1OnR42ErreXg3OZ%2FpbwJPMiKS64FQpu4XLuWXRDPZoS5pw31llTCSfFjreUW2awos%2BfgfvylLPDOLEDfqiWoB8%3D\"}]}\r\netag: W/\"ba2477f34be082aa103ca596e40a6612\"\r\ncontent-encoding: br\r\ncf-ray: 9d8b11b01f8fb7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-06-13T16:09:10.192037Z","times_seen":16742,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/static/bootstrap.bundle.min.js","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sbts.pubgypenguins.com/pudgypenguins","date":"2026-03-07T16:45:11.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /static/bootstrap.bundle.min.js HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 16:45:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Feb 2026 01:53:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2BFOlKcLwhdnZprhIJqm5oooC2q0hAdwXbK4ihYtfjh0j4DEIlqk%2BZ0wuiSgqcbKTVjUMiOrxomHWVgHl1%2B33RCBS4gjbX3vyuhwNGRzPYBgc6F4gFY%3D\"}]}\r\netag: W/\"d24c217703b35fd667491652943e8afc\"\r\ncontent-encoding: br\r\ncf-ray: 9d8b11b01f91b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80663,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-06-13T16:09:10.19401Z","times_seen":19335,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/base_video","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sbts.pubgypenguins.com/pudgypenguins","date":"2026-03-07T16:45:11.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /base_video HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 07 Mar 2026 16:45:11 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1343954\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-disposition: attachment; filename=\"video1.mp4\"\r\nlast-modified: Fri, 20 Feb 2026 12:39:53 GMT\r\netag: \"0354a999b82a7e2cc6824c610b68f7f6\"\r\ncontent-range: bytes 0-1343953/1343954\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ma8azS%2Fk18HSwA5%2FiyFOmdoOTHfT%2FfL3q6RornMwyVIS5dBm%2Fb4quq1g642qisc2ZyKVViJb8PAy7XmhWYjrWTRDvbUMx42mLORjY0AbB2klD8WmrHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8b11b20bb8b7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46315,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8911455af8bb3a48ffec2c3ec37b5289","sha1":"a0edcf80236d3439969a5c72d806a0925f20164e","sha256":"a7eeb8784ce2ce29900256ae12b8534ad05e40c1d1ae72480b64f878df3b1444","sha512":"5336db99a64be933d556f5729b952ee63282685211af604f4465bf7e701e56a499fb9c590878800574f434d9bf3bbc158c0bdadc2bf51db916865ea3276f5c8e","ssdeep":"768:oVzNcKI/1LNxqPGWj9z3zNzUThV4+albqDfRbBkrkI9dlyqC1U3x3oR4sCBWJWs2:5dxqPFdO4jBqDJlQDlyqC1U3x3oR4/Bx","tlshash":"b723f10947ef42c1fd7062326db15b2677a63ad7568e67db610840ecf032e68fdd0428","first_seen":"2026-03-07T16:45:37.854808Z","last_seen":"2026-03-07T16:45:37.854808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbts.pubgypenguins.com/base_video","fqdn":"sbts.pubgypenguins.com","domain":"pubgypenguins.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://sbts.pubgypenguins.com/pudgypenguins","date":"2026-03-07T16:45:11.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubgypenguins.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 18:28:28 GMT","end":"Thu, 04 Jun 2026 18:28:27 GMT"},"fingerprint":{"sha1":"33:AF:C4:62:45:3B:C3:5E:4B:74:2B:08:0B:98:65:01:C2:D0:E3:E7","sha256":"8B:0A:E9:7E:D3:D0:34:CE:AC:16:84:02:E6:6E:B1:7B:29:40:E8:28:41:86:D9:D7:7F:1F:72:CC:FA:85:22:B7"}}},"request":{"raw":"GET /base_video HTTP/1.1\r\nHost: sbts.pubgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=1310720-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 07 Mar 2026 16:45:11 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 33234\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncontent-disposition: attachment; filename=\"video1.mp4\"\r\nlast-modified: Fri, 20 Feb 2026 12:39:53 GMT\r\netag: \"0354a999b82a7e2cc6824c610b68f7f6\"\r\ncontent-range: bytes 1310720-1343953/1343954\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQvBwhWm0dcORrZXLbwHgM19wDEUYHxDZtwxu09UqGsZnM6u4p60jiJJY4Dk%2FcSNxs9T4h7n1aRcpWNSuYCEQjnXD%2BgQ8YagHrrSl%2Fm2nypZDAf6NWM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8b11b24c2db7a8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33234,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"03c9d61bc51bbc5fa2dff374a3f03e77","sha1":"51969fb960cdaa83544d33075c830c08d94262bf","sha256":"ce83dfdab0a0813d769b1ecc0e4c86984cbfab69e54ee469987f6bd9e0ddc5a4","sha512":"2848fb2cc9baea23fe91cd0c6b61aab0a15e4af788358be8c6af77c236b9004d40ae66999363a732fa33347757399ac408e016f93d8c07ac0981587f6f95ea68","ssdeep":"384:V2S7bQC41IY4lAuBD3M5W7rvRInSYQYe43tk4IrZ1X/WfhPNBo3LX9x:rvQCSIY4lAuBD3F7sMYe4tkTrzQRo7X7","tlshash":"9ce2f4186bb18546c521167cddf3c724b779eab82253538f5b8c723ebcd63a02e821e5","first_seen":"2026-02-25T19:52:30.588473Z","last_seen":"2026-06-12T05:27:41.829119Z","times_seen":127,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"sbts.pubgypenguins.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}