{"report_id":"799dd07a-0718-42a3-a93e-2861f01f3b60","version":6,"status":"done","tags":[],"date":"2026-04-15T07:03:58Z","url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"title":"Ethereum Token Airdrop","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"c325f8b35ecc3539bd29eec61727459f","sha1":"2dd75c85adfc0e1e0063b1b14d45f6ce1a21ad77","sha256":"3ac1e32e0d7f655660fef82e39b099f24da2b1f57b10215d442ebe740d25e875","sha512":"819edecc9f0d08a7d5e04fc582607ed898e84632c44f1a40627bfca67449a3d20b368a1f2ac678ba8c38119cd151b441593e8629a157668c6a834c2ab953f60f","ssdeep":"","tlshash":"e5e026ee1e75c93464f8138620b1e29c1660a1a4ba11d60442d9e87b9e20fe78c92958","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T07:03:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dallying-reveler.fontmaxplugin.cc","ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2026-02-24T21:05:37.722165Z","last_seen":"2026-03-28T06:17:17.716542Z","alert_count":16,"request_count":4,"received_data":995177,"sent_data":1917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"livedrop.cyou","ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":5,"received_data":87558,"sent_data":2399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":2,"received_data":15512,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":2,"received_data":30146,"sent_data":1084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lite-api.jup.ag","ip":{"addr":"3.164.240.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-04-08T12:11:30.750303Z","alert_count":0,"request_count":1,"received_data":3130,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b214e79e21de6487b6b5965e2c386b","sha1":"cc24c80af1a1a87c4f68d5e635b5a1cfcda082be","sha256":"71178d150a24694180f6e729448ccd6ff46211a14b15bfaafb45a045147864fa","sha512":"e2eb62c9ec2833ae401fae81e3b5100d48916ea6d15cca0b172158344ac3c8583a7290abb6c3d6a09958ca5774c66b71a9acd97660a73cbd960ece0d53abc061","ssdeep":"192:fansMwJj9i1T6vAaTy2c81Qvae5ZBA3nFvcEnR9XLJZr5Axd9c+JWFJ3M:CnsRJjaTDjd8Wae5ZS3nlXtJZr5A5c+9","tlshash":"5bf153b1327728363262d1be4bab620d6b6db40635c9c49035ac75d41fdef11a4b78f8","size":7738,"data":"","first_seen":"2026-03-15T15:01:11.247113Z","last_seen":"2026-04-15T07:08:17.806782Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b20f498e4b1e9771194c35c253a49495","sha1":"39ee097b31afac8a6d1ee4620aea6bc1cc82639e","sha256":"4387be4177ef5de8822fc02f1e405ef02dd5842fd140e88c48107ff877bb1eec","sha512":"d794c979fabdbd3eb42fd681066c271577755783b80867d4f2d05a8791165a5c469ef3a0a2e6d469971989abf62131a61d6ce75e198f66e5e3a086833fdc7f29","ssdeep":"","tlshash":"4e11d0793b155634c5c58147317ee7a93d3250257a029044c36cdc295d18ec714dfcbe","size":902,"data":"","first_seen":"2026-04-15T07:04:03.64838Z","last_seen":"2026-04-15T07:04:03.64838Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/_nuxt/assets/index.js","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3d28ae446fe625d5c005b4d73a39a5","sha1":"8a265fd8f89e9e56e2e460b39a79ceef2a51b732","sha256":"c0f9a8a3c83e40a5954cc25a1a82ff4b04f35670f4d1070c3995b1efea4d0a71","sha512":"651d99f80aedb351287cbdc90a294764635c515d38457343b3d38211baad2a916f775406c003cfc9501d382a03873ab0f2cfdd92a7ce0dc18550fd9e023d805c","ssdeep":"24576:D+IAznaVLmcZPDXrMDobwwZQ9NlreXKGHs/:KWDX7wwZQ9/ydHs/","tlshash":"5c2584c63077b3e915f46fe838a83c3014c448d194fc29bd6e4a9ad4c6f2562afe9d91","size":990553,"data":"","first_seen":"2026-04-15T05:31:46.901086Z","last_seen":"2026-04-17T12:38:04.380377Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"397a15f253fd022f187fd583347b86a8","sha1":"4ac794e988c450518abafe9212dae4cc3e29b583","sha256":"b15dd1b2d16a93a5f05d3160984b6efb67e5e38b3b4fb6ae9995fb7f072dd482","sha512":"a436f067d915505a2764e2dbe71104ab28b622c4c007a2c274f1a229fcef45ff952c8197544d27b6afd0b0d12f1306e18ea39d29405619ca452062fb729ace85","ssdeep":"24576:lq/B2VJkEZrZzDcz1mpwcBK9LFnqV+K3sH:pZzFwcBK9hkN3sH","tlshash":"661593d43177b7a945f847e93ca830c0144488d1d0fc39bdbf8da2d5cae5a52aceae91","size":955605,"data":"","first_seen":"2026-04-15T05:50:11.762093Z","last_seen":"2026-04-17T12:36:55.165451Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a59ee1f36d06273edc3bb78381680be6","sha1":"1c698a3d64404f49347a0a6498dfddff56a33288","sha256":"dae88dd778186a2ffad9c726e3bf811a37cf3f4ee84123bfb0be1b4f3075780c","sha512":"a1e2377799f7639653cb81c3f6fec7ebe6f1d6b609597b0c0a128324aa72dc6e541b3c40940502805c684d3d9e62502943fb20a5f82d85a0e43e0d047c50696e","ssdeep":"","tlshash":"34d023dd1e75c63051dc42465076e79525616054bb11920082cddd3f6e25ed354f195c","size":217,"data":"","first_seen":"2026-04-15T07:04:03.649942Z","last_seen":"2026-04-15T07:04:03.649942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87bb7719bfd300d784ff769ae891994f","sha1":"c6e615fa61f242063091559d39d6cf4d6b06d0be","sha256":"c502f76f280f554646099dee7c98d2340e773e2088c612adffe266b272bd6a98","sha512":"4ee3ac2b5ea678c867c2a9f65e34c0afe07081f4e747d288694f7e50f97bf934050432d3b1a55b2fb43a34b1d84121dc2e3fc09ebfd4ea3f76981a22d0d59fd7","ssdeep":"384:zJ5pNMpnEFgbk2NgK3d2tm9T1boEYTPvJ2O4xC43i2DLaVcqfLlLYycaaabH8HFE:V5rMpEU9T1boEYTPRMFNZxLRMvBR","tlshash":"39c2d8cb34d5752097b6706a516b70cbaa7aadb8780c9a04d3109df4787330aabf7d1c","size":27585,"data":"","first_seen":"2026-04-15T06:31:20.304493Z","last_seen":"2026-04-15T07:10:35.364308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/config","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://livedrop.cyou/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K46SzgjDmikJd2sxrqBUdmmPOLSbGhOn7h%2BAnvNTfay7V5qS7eUG%2B%2Bx%2BZjal13bmUVxPsxZrmJpxeE38CbvYeMwb62Bd%2FsBrPzaKJ6cv%2F8q9vaS7ixjElH2PzbdqyaM08EmH%2FxAXj53Up2YWrD06ynh2ycY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ec9176bae5e569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"0f394fdf43afa9660b265959ac0187fb","sha1":"7bfe4ca2426b41a942a17c35630c25311e0b70ea","sha256":"72cd1c02a99f22be60290db643da4d049a4be9a9c5b7a5ef6a7a384f62335baa","sha512":"70962c5170832525f84571a84c894a14259c80340f76897c6555e254e90e4d55309c2dee517417d00028a4c34399ae459d3df87c30fb15825cbddeff0c9d7476","ssdeep":"","tlshash":"c1d02b01dd152b10a2265277c4adf59d00d1bff14e96fc74c4b51db44c1e58a16cb660","first_seen":"2026-04-15T07:04:03.638911Z","last_seen":"2026-04-15T07:04:03.638911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/visit?origin=livedrop.cyou","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"POST /api/visit?origin=livedrop.cyou HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://livedrop.cyou/\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LTl%2FJxuFCvJOaK2wd98PmGmi%2FmXiaBLUYKoLbM7hW7bEi438q%2FiAgNun%2FDYgEEQbZZmBiIGxVlY97SrBdih4dEItXYsfTpSXOfCkrptpJRukmzk8hlxLnGb1fpp2vjDu%2FVkJxs%2FH%2Bgf%2ByaaA6tq2QYVMHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec9176bcf10a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-19T11:27:20.423285Z","times_seen":397904,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js?","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livedrop.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:41:15 GMT","end":"Mon, 22 Jun 2026 08:41:14 GMT"},"fingerprint":{"sha1":"AD:B9:0B:91:DB:6A:95:F8:59:5F:97:F2:57:41:96:5C:89:D5:10:20","sha256":"A5:08:68:27:CB:0B:8C:2D:87:8F:42:BC:32:66:E9:AE:33:D6:1B:AE:CC:4E:7A:7A:8C:5B:9B:B2:63:E4:B4:85"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js? HTTP/1.1\r\nHost: livedrop.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec9176c2f9bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27585,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27585), with no line terminators","md5":"87bb7719bfd300d784ff769ae891994f","sha1":"c6e615fa61f242063091559d39d6cf4d6b06d0be","sha256":"c502f76f280f554646099dee7c98d2340e773e2088c612adffe266b272bd6a98","sha512":"4ee3ac2b5ea678c867c2a9f65e34c0afe07081f4e747d288694f7e50f97bf934050432d3b1a55b2fb43a34b1d84121dc2e3fc09ebfd4ea3f76981a22d0d59fd7","ssdeep":"384:zJ5pNMpnEFgbk2NgK3d2tm9T1boEYTPvJ2O4xC43i2DLaVcqfLlLYycaaabH8HFE:V5rMpEU9T1boEYTPRMFNZxLRMvBR","tlshash":"39c2d8cb34d5752097b6706a516b70cbaa7aadb8780c9a04d3109df4787330aabf7d1c","first_seen":"2026-04-15T06:31:20.304493Z","last_seen":"2026-04-15T07:10:35.364308Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0a7532ac8ec/0.4425595176128554:1776233771:UPNcoNfVDHsElVhgBm1QOQV8fOhTYiDxVv0kujrCNlU/9ec917628b281525","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livedrop.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:41:15 GMT","end":"Mon, 22 Jun 2026 08:41:14 GMT"},"fingerprint":{"sha1":"AD:B9:0B:91:DB:6A:95:F8:59:5F:97:F2:57:41:96:5C:89:D5:10:20","sha256":"A5:08:68:27:CB:0B:8C:2D:87:8F:42:BC:32:66:E9:AE:33:D6:1B:AE:CC:4E:7A:7A:8C:5B:9B:B2:63:E4:B4:85"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0a7532ac8ec/0.4425595176128554:1776233771:UPNcoNfVDHsElVhgBm1QOQV8fOhTYiDxVv0kujrCNlU/9ec917628b281525 HTTP/1.1\r\nHost: livedrop.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12142\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://livedrop.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12142,"data":"4ZdbQ$CrVwqjjqKCwCYCqtdqpbqK1j1Mcu1p0VwC-1lWuM4odqjCRu2vbC0ujt1WvRbq91vz0CBPt4uD9n1g7Dcn1VXmp1C$bC86VcKCWw6MKITNg$wdCoL$T9MWF0b1ym315bbZIZ0nlzr11oN9pwmddCD6BDmLzCPPiV1NlqSr9NthgeZzgef1Cym6FO5PcK1evn9vWWfugsO5lSr1e8c1Vs1SpjR1GvYnbUpaT-J0b2VrnUu+0qr1eFS11fIz6YFDXYY1qnEFURkrx01CvnWwVup1eirUCipemu14hDzum6TXXer1VlSwqrS$Yep-K-rx1k1V$TCuRxiK110BpY6eplVVFVeFV12dl1q79w$1CutSVajNdt$1cRK+2Zy7m6naVnaSdZ52uRnfm2jMepzulc2uYZZg16vu1ppkelAxp1p8SIKSSESrcqcNS7pNGrWEJOGLsCrcTB$19c$y1tVv-dlC1FuiYEb1j4jmz9Fy+zPpeAtDBRlB0nl4nTgoNgXLdD1qedbvVneRcUQLrp1CEGoIFMgPeG74ptiZzepFl9owdN4Z-9FjYnh1hy75cFp+Rws3ZiofExv0lmYTEb1rLj$Vho5Pl0UoKKXuLfA4DJwFMr81uZLvzcusc+g9VgOXRp5S1DLtendQt4SGzzly$rSsPvfC-TJb0Jzf2PncWE923azS5pSgVnnN-xspu0Gi3hMxld04Cab44KlsxFlgvzpPsQiMpf0Wo6jTbEuDwEouVqN79fuS7UwTymeiIzPxXsedpbl11aOKymySKrmkudcKT6yus4Vplixztw1Rqrq0+C6g1CW6xpzcjEz-CwlwrpJrpFeuEt0Gkv0AutL$RI0CbJ4wUnfewppR2$rmcVK6ITudlnpMsln92$NIV1TvgcVuw1eIudpI2S6rgVZw1JguceMbmKOpVYEeSeuGcZ8wrd0q72Zm2upe-6SMgyxrhbmCv6t0uvwcmbCKD1nvLISewanKkkgRce$AvCg0cKIGZqtmeU-kbR7ym98k9X1MGngruGhXnRGM1wTgKnSGtx1yvtKRzQc$RKSYAX9tcr0b+h0g9n9vQZ875kkyZsNvlwUI9Cv1u9wh5KYCvJQ2wAyek2rhtrFAKU9bt6UIt1mhtdc0V7emKvmpmr2dvIzqKrcTgA9GuUmFGiawcKtXIOvYGZPKskKU4VedJeN2uXI3F0uYOKCdecJnhYIjZSIVq1ceJgDizOeizk9eisI1L1VtOXuwS7US0InPI9EPCO2nzwdXDC2FypY6lk08a0v0$JIIK3MswCy+my1OFJRnfMVJlTq1PKUIswCVV9ScnIvmuFujPSrY9cOlGIEQvS95WfVj1YZxU7Q0-1S6-nBflTVu9p0G9lc2n0Jlc1VxEYewKFx8w2e5+dl9p2c-WqewKGqVIXK3X1PM5Gd2CfrdgIC2L0EruF10qVY1zx+-WThs4$JGAKrdXD0KGAVjPm3bxY+DemeXoA3xaoAn9losFx$e2FUbKYRfECh67YTn1UyQY+yA-5lW1LZvv02fm45Mfwaxi6PMPQAK11G5z04Ggp1gpG3owC1DpK1uq9y1X5mAPjUU-Ivwb+92IoUdc0S1ghCIbeZQ1ppMCTrp1M2swj9AoIaKjVEc3QcsmS7E01GRrCuVzv0PmDV8VtuL21aqS1jGKUKcIYoiDlEB9KppPlELhvLTMqh8q7eQirud2unCodZ2NBdiYZyi$ueu21bumBmqkowueJYTD2kEese0ckN0-g616Ficzxe40$qrSV2cx$3eeEDnKVIkf5eOyVPXCunbx1l1E1ve0Q8r10BIeuM1wSZMuYNjyAueV7t4xxTybtPpDCwGOUyy1ISsYyqcmp+tLVWmfCKj-L9jdrMzucmvupO00q2ooBvAdEmrq2vF4pJkFC1Y0bnBMJdppZygQ1g0KGm45Qm4$pvKyNyrk7vd6dPnnbcBvOKud1OWFU77zrBbuZlIEBno7+XJcDlcnf206yg9OBlyX9Zws6XUSoMmIDki2DdCuS8Ym4plu5mat$eAG8cklS1qSdIDqzvcPcXcilEMFcVCaK0Wr+gCNTrxSDlbNyPxJgurbtI4LlicSZdiYccei6dGU1taiTFsiNkKXYDwhLN4wd$2hVdGRVqTkpK7ys7y4gOuVRtzgDpvt1eXL6cBWckjO$FEGeS4SJdQEzpTJUsITpvbMUlAxu$72wbv20ovzKZekULzvn1mg$lQAx3w8k$6t4CVq+CzeZMIfNTE+mhMx101UGyJ3w1KX92WoMVjtu3CFsmgx1oOyVnEicDZMv2kwtuPkMBIt$rukEIWBFEGB9V3c+cyorR1C-rmKRvmQ9I$jM1XtUK$qyVtwAaLstZClaNrdZUWbxCBEUfX9pzxVVCvOFFytkhzm71XQFTLcqECD$0SXAUkk7+AU$V7yWzgjwuVhYeZwpV51k97w10bqMw1WBWX4fSXi$GXpv4I4yTY1wlljs4XnXL0IvvVOf$dRFEuZnKc8PUU-vGebB2X2FbSx9k9lrJMQAhC8gTNupVzcCNgRNbxafy0qmFo8-upz-rVM8IUKU0nCKR6wrKpLa5Qhgbq9QoVYZLJ2sdVuV+ag2vXlvFXi-n22MXjOBvVkn1CeUG9OzibCyLVxIva1EtIhxA7Yfvum1tGVsFpjQgZBtIKp6FGGWNDYcxIt7MbAKuXGgiuqElbnjhEtyLb2yhL-c8Miq0+aCuo3kPYpcIC0BLkCJkZyIF5RF6LPVQ82GkR5tVdXCmNCz4rX01$nek2dnVuKJxJB2b1pqhCUhV7ZpWolmrwtMYase$Ok7GrxYjUkKaTKXeMeACbXVqEjY0K6q8YIxwO1golpEVe2JaFikqv+vsxJQmofQcWZx0FPv$tzNYC7XOBzXhsbWIq6u6dqI1miTBrcxnWqQ48RDiQj0uTdDYi03qvjdpQ1f9EiC9dPZIbU8RQrctcNqM$MDG9Q0ouQWJttRENA84qMXxOymqzdp64LqGutfqm-VzvobGCktSdNCrC3OTrDEDLws+v1Jreol5YZPhXSLvAnT6jaOav25JGdIFkkVGp2VWAKdYrKzKWAdFG-q-LOWTz$+mrqecGxEk0Q2V6+xcXc5wsnKSPmFp-KNG3hl1nGEw8F3SS7LznYsdpbSJktAK57M4KW-vxwtSSbeqwmCXEnKRwYvLzeTSyrqglv2SMtKkEjWn-FGq$STfAg$yhWw9rkPtUbQ73h$Pd7KeQSI7KviO-ObEyskMfw4iVJL6kmCcD1qFApkMzc82MJsKcZ$kwG2w6bknkUJX6qw5MiLh-e6cPas$h+oI+cE0KVd1PXOULIkqa89fmWSxfZIwghq4O9xFQfnDkbNuo1ZVaLxc4$MSJyRazaVZSjPrZqN3J8GO9mVcrmy0QEpIbUPvoKKK3K1y1$M2XuQWfWym1b8F+wfsKjhFaDneFsUsZpFj3iDwR1-Z9y0Xtlc1EgtfnKLoIrhFN1EgxiECMXRlAlEzk8e4Df94JvpfcF4zn4X8SCuKDCO1dpgwbtFiy4OjAIkjSZxb3brwswcqOFGjTpd4bq-gm8JjmtcvklKtgbmnOZ+uTb4XS8gZpwTI3I2f7txnqe0utVIsZpxCYC9a0iishlvpXvDlEucCilzuxaMd3rFIVCRXdIP1dmdsJKcfalulD1A19Kbn9qziDwswjVCVXKdVhfUqZVe4Fem8gfaqEb4ynIrn78fq6nWowsijcXym9fXezdKrZF1nQXtfs0ciTdWmtsKpIF91vt24RfkXLsjaziJoagSyurDv6oBuhXumnaDZpskynsMa6VQj0fyVbvQVOqFDV1eVZme4VyZ0t$us0fU$68DBWvYgiIkX9Cs1mB4FuB44V4Ez6q+V9i5Vp1huXpFet4glkpk$maRq+g403b74KtJe+l3Il8z$5ZarMKxKTCxsTsto6ffFhlFtxedvnInsQ4XfSttpYCK8kKj8psZFDm7vLBziAbF1Gajqj8UCij9fYdli2alBEIVjdSj4bicDAuR12s8duDlabjtm-Kmj2wFIB1ZybvyqzsjtbshS5F9edm9j24XiVbyCPB3sq11SX87nSC6q1nbtmjpfXshKNIGCD1sK6jpfal9g7tcXBBal2FKmBBVFSsoZCNFj$F4DgCpqTg0VXXJrknCSmNVCOCWD3BArtm$BzCgpbv9uA8C19uTeTXEjgSGnsBl11mmKb8Q4ImiD9CGC3bhFGubvCvazad$VTzSig4t44f9C8fYgm8gldNTSZFgm1I1qKpbsJea0rns1daBCItI1heWIejbWS1AB$fcC341mJZcKcfVy9uMIc1fwxBmnMNcNnjdOz$1lvOeNtwJI9CU1sWRjJlmVCS4okDSw1ptnqj3bNjbmdshXbK1O0CsZl1-ZhWoi2qgyXfSNzdgWMgtsll91vsEvAIieKmo8dO4yKbka-sng9WuivSuSVI6Irttn-OtlAwaVo4Z$8F78srTfvWhsUwIuxyPImjilm1hWzN1cwqKpm$0VumhjqCwNcu1msC+fKicIyq7qsw1ciBjspq1QkmE140EgY$1Q2fMfkctnJ$6XWycO0akW4DUWtreOWpSKqCWogvBnQ1YdWm849eNqk$RK-nntoWdQUftcaBay4w-ZMvErf$AbDcU1JCq1qSoyGNDZprgtYK0SzqaKxnzf9nzdA$lQDIkDzqAngVqXkDnO$vpCgpkCJXxcbValYCMsDcbaOyXBU1DOwNOFBfxawXnyQf7DeD-QyVABvO8eZpwZI4BBcjCniOnFcVoyuO2wp4upLgTC2gjsknurJbMIFIN1ksx4Vv3vMs1InVJWKr6dBcMtblZ89ohaeZRoEk34Re+g5s5cqFsb74r1ZfKeocZpCftSleN1q$PVtpQDrnKiQVjy24PcwoLN0osz$m5C9CGwlCvqiiXXm8CkTogmFIiDr4KnC$ZyVbcCvcpaeWbofX0IgZMl-KKOmai81SNrrCjRSn8o$N-DPbVItFynsC9$jomjjb7bY19QynYkVlptE8ZbJc0NEbLsoStkoFncF$1QVyhWb4ik9NJcUKvgdbyN-QkZmfMKwR7UZ$lnAjhU4XfFSoSvABFtCCA8bk3ONkdp4Km$m0qfq1KLglgI6wZRryYjXSpnTBOFDm$IlvYQdu0DOF$LmQYN+dYRV4vKxyCopt0U1trI+gzCZnM8EoMaV1NfwK+Q6alRd$ML6VrWfUce5bzyAszWCNQRkDgvrv4KhQ$Qgvdk4$Qatfq8D1qCFWcUIBzf1qnwUCmCgIDb3kVIcg4R+kWpNwMiWmOSkDgDqN0c2wVIi$GcUBvKECn$oFBWay24mbpw04VCIqOOfs0Oz$RCg$MrMlYD3bnkJeGdPXWOekQ4MlrvYNUVABm8AFTZ18r$VbwobwRiQqyUXajLgNrNZQjjY8dbKRUCE4BIaadWnXrcNS3igumD0NMLxL3bvk0iTZDv5ff1Dl2LhFSkYd$Kb$ceFnFScskfoDCrwWbfZRkbMt4aqggj5LZI3m6m9NZS0lvmZqk1toUDxtq1-ZK$owCfyBqqxN1VJXBU+IV$3NcoyN$QCNh8ZpMSo8Ki2-RanwY87sVlak0OblU7iKFIJD5kNkUGTgDpu-SQtfdSl1kubn+QgpwZ8F5bstGZRoPbeyjt3fgDN$Ro7$hZJsJBjScX3LnqNCjlg2qXk1FqYkY8XWU1KUClStIl8XvNjnZr1ciftSpNgZTbTIPIFw4KcsG-sXjutXl11Mer-a1ctpcNtp24av6RDCdlxthFB$p4$mKFtz4GB7p1p-GdTfX2zCiZhX5FLqZbNIKwB86q2GMIvmIlRLbS+egZhO3BAbIO0GrU4UceVFs7ULpO7LVLGLYLFFS7$IqCBCewQcTr0OmGZekqORmk+jxf9o2iws9iTisWcW0rIctaiZgDm8uayaBuO8avbL2oBBsWRWStzYB1N1qcfSTrrnG1ZSGQVFkmfk1QOtlDc1QnzI3qg-vK4KQqKu1vQVs-X2VOVbCwqali9Wj$hKcs97RolV9dqV-1ODYW7Vc1Yq1mjiVuF1gXCD1Rwn5wxGdW6S$7R4azTgMMLw+Cbr1QCVhpW71tT1BVCU1lY7Zy5sUQ$cuRLqwX1nyttnl2CmeBmcpjJK4Bv8sGnGRYl1LYgYzWwUI1d7R15cZc9LVLILlnotZQ3cRiT7J7cKvxm8J$VvGQuatz1x78NCZ2OCF-uZBS-NNSYQkR9E7-twJEGcMlc2NL5QloyDtDYMliguGfJnqCmjMvS-U4ms8xWyaxmL$4lQc71a-cRvTIm8olDFeym1mMykYdwtloUO7MjsJXJjNldqfSEUVfUqFnxI3IEVmGcbJdMN4aBNv7ZFSMEIbRQr3QJ7dWS$$-n2O-ELNNLWEIS4SnlNT4MiEBIYEoyi8MCQdr7WkpeaqyYOdWncb2sU73TVGfL$x-Of$jzZcK37BlRtm1NGRC6LuVOUmC0b8r2wFNk1Es5cortmhikaJnY14rJgk29gMI9krw1pNU8-umo2r33b+y077SS77xFLOMYCM1JOUh2FCIdI+dumpLAi51FU0hVv3VtYMQ-ffCLYjGrG6KsG-Zm4hlT8uWnaQCebRC5kcshGVvs-G2ahBlAYl49Lu3otzUZ9O-cDmOMLglIUICuOkaag1vyiFe5ga$z8A7CUPQU1xFShFqgpea5drNBl-yR-eE-M1QSOmV5cWsYis3e3e4hoW1csilV1geEZebB2AqGlNS2N5B$4hvmG4yf9dDPWuWEzrw9ItjRSumB$YE-GEuq3R3j98D$ROynY+BxXRU+GYMwkqQmlzviYoGeyOVK6NGQ4u-LNnUrr8Fe4JLZhM-cQ3jkubmmfDCa7TMZbYv+viKrbROL8SnfcF4pEXYmR3mwYkIQ1ETUSceaSMnqOxsyczjm05EZQVa$amEa7Y6vQDNRWJl8kXyDy7orhmMkpKWFCafN90RyntsnYblAEOlttaQKiSXBbJXdxcQi7Pbyy$71-Ivdka4ec1c1kF61xPjIoAosMvqPbVDZI5yBgmQn2zQWihWNCA2RXya5g4tWEp$a07kDvOq1EGQQL0IC2ptP2N4m1bsL3vhs$rILh--ZlMXav5EIjMyvQOYLqLT8exbW3sP7ypW4qky$-34zCkGiLnlcEjmE9J9TDSPW9cJ-hpxvmRx3IYeU-lCmQupMg4ggPcsj7g+ZI-RlCfV+w6SpQRGfsm0S7FT$aNO18yldYVo8qKme4VsTdu48tgECm4tbyupC-ZfhQE0yCM9kksEWRiImjAWXKFSeClShaDr-DDm5ClC7X5ga-Y6$346+886btkReuq9ByaoxPcC6qIiJnD2e2rnFGbpB3uR3IJjIOQhIu4oQWYWEWloMEcshWf4SnKvOnhYtM8idYphzFEMgDCFIFlijQbJktUqgSAB$U95J5-Jp1iLCblE+96sP6TFOQziKTWqDm6qg50i5SiqF$VIJFAPGxe-9L$LvOC4ePtvDTkFL6oMlCGBmVSkZFeU6dUqXN0bvAPIVic$q2CWQPOuz$dqc$Nc061WmB2ubbPpqJtmhVIFXQ$C$V1+e1pumjq16pgNF-2zDT4ZS-nJu+N$jSGzN1CLwQeoOuNY1Rk3VVGFu3V7zXTYUOJbrmEYpK4QbWl4FjSIaRlsnAdJxKcs2dC0yktT0Cl6mYkSfzzsn3xKCF2oDPmN1T0pYdTOXXr4Gs91xKcw25mb1R$lbcn6dghV$C6tE8lG4Cbv2ErKKQlEd$t6$BSVrbdOxSqGpvCLFBjJbiJwt$j1Sgadayx1Vp3enkVabFjVZ4VEpcMappGvPnudu7$vvq1y4ryGucNpmqD1vpOGB$q7VzqmJdTCdEbYVbzVg0rpyxgoqIByILKvJCWcVGcG-jvImpjuTgGKuulCizewtavdGBjtcsBpjBGfeU14V0pNpf1lG$0uJ0rCiGvuGNu6c8VabkbUtG1qG2FqmjLpo71P0MqFq8iyz9uYlBYu3ynbdb9UB6SqqFVvG0u4CbzxEu$1a9yUgiFtlhe4qNI3yrZJxFSGDqiILSCdNycq1Ep5cXp7yTSCK$BZMu90LZr-CAq+VabBudp4qOnWybTy9vdkCfCVu-1$K9OUupKSVGSqOpsdDRTf1wd4lkJWyluPgMmGaVqVyTxupbvmGPpAbi3mfclGgud$wmMiN2QswS$7zm1xecK9SeGqwdRTnpju1RVcummpc$rJccVuX2tnnybtMKeiYabln1b744yXiuPOw0nmjTpLC91F2jXWbnYX2IVdy2saYJROvuNWq1G-VhwTJJOeNuhbzjg0UdRcGEEhNvBksJ1MYwEvVOIVrbotsWTSCCuusNIZbr4TSuvu00+mlb$uvYB4G81QmpKLcus4q2I$xm6SQL+rBSe2Fc1O04M2dwE2hmnVK1lwUG9YuX$LdT92wluWceDBJKgapjK+oCqZna0+iVre0GRG0$nbqb8p+b1I1k1Adlpftx$Y8z2qTI-pFdLxo0qerdzFBqeyG1ObpsswK0yuXilL2LtzmDbcFuJEokjBUzM1JjN9wICAB9ijXq$Vhw3uNbnbWvxrUh6g1LILVpOPkuv6fBFZ$z90a9VAxICBVfYKNx1QY6rBjmUIA76Oe1Oc2uXGiKtnpgpCKC6mXGByPokVu1M1N91y4xcTsCspNIiZbMcKmhFbY5ql1Sqd4jZV3e2BnyYu7TcV2k$DvjZYzNFcYGC1+Im1T16bcKCLetfF9my9NTu4wCXDijcwSJqyFbzwmpblbl21eBKYMmyKQk2SCTSuqsSr1Ty1dGgg1V2urkm$rnqgco7fz9Jn+GhuwbmVjuOYqeaF9kWgKOBX1L643cKeJ1AFr1m5psMN1Q7oCFh4XxX+eCKYODIjd6w0G5YA1k1DvawrhM$os1GKBwbwlW6XVfuZukCkCuu6IptpjNZSfbfc1Siu1lCUgnb11egfChp21I0eQz+mGtA14th8gdM8k0ueGtbPIV80wniz-yIrJpNy1rShd5CTZwM6Dc9m7VLysdl1xtgBg+jezBvhbF$iKQOD9uob+K6T0LXZ8abXpEntVGyC7q4dEAXp2$Ns20bXAeRu0NjVW0jCAnaukhI91$yf$mISUxqyGVTtmr5TxpkbVJpf2hlOpQwrdGcQICl0izpK4kJA01MYClnDdvFGcds0JpzmN0uET8V6-ybGKA12YGcQRGNg3nAkeMj0MJMEvGExp0u6VG9ko$eiE+vu6DeoGlNxnzGwvJVuIq8$g0ByKzuI03G0BG15yPnuNcce-$l1rZo7vDGN7vWOpgwnu6N4Nqmb4dogv-MwGVIKr61DbQtcByBzv$5CTCrbGh4b7NzppP14UwdGleCImb$tOK9v1fehCUYFtUb1sCJqFg0v3iZ7GteNC4lmdoK7T6XVJCqNhbsgKhxezDbcv+jqeVhv4c8yZrcKe1PYSl2wbSqlY91JOcXuMBhpqdmy4hU8GECNSpYd1QhrT6rCwCKkLjAYg29lQmWY1qbApwK2sC+jN9fyKZeYYBF2XRK7rWZX-wsppnTy2u79avq+BnWtKGr+-4266RDOl1q1K9NMwA$qt3XLKicqE4qF4OhDP4ETK9$SI6uJD7pJ9q-w-yG1f9bXqTEhQi$oOJd7ESTvDw$NTmrEn3SgG5Yxy9p1vP64hJKVBMDWW1Ij90G-wYWOCkCPFJOuP6zSkV9Dmsn7G-Qok3ONTnvNJPMQokFm1wtXSh6P4vCBWZbfyat4Am6FTO5DtbCuuLcKC1QjtfGckQ5goD2B1e9+eEC361lqOZe3DGAPMgKbtl1jfy9pe2qaFOC+OJVT9PMwNYxZ9DxyC44LBaFVVDDvVnbVxz5FicpK8VfKg42WyjQ4rUsjMM8bkBr0BjsblZGaM4FDsm1$q4hr1+0cnv9DFu3fG0+mdiczeFjd1n08xW90zel9JjE-QIy$1MtYIEIrCOtW0IDe7Vjl2ANulZq+DX$YiEWVwvaWad0srf4b+luU0KDBw6CvZkj11Q$e-$Whc3urvxCRysr4zPZnNywQTK0SDClZTVvbQIDKSiW234txgiey3$Yz9MYPFApyF0SFgSc3WYBCgXit0KqKTbva1sFijWKrZ1-bCWZzxu43eb8-IlQf1UsDbqayyOcuIeNSnryry8BBWyhf7cC$Z+5-DWk9mOcCbijilevhKMjvAmnF7vv0Qe7V+1TWxkx8W-d0j51I7YUxhp1mQWUqVjtExRc9FrOBTUjTaIqQOVcs8JlK1kxDWS1gpc0eDCsBDOkZgON82x1Kl6QlvZc9APMgC2ZCVFm99JeK3VC5crk78EISV8V$xcOjfySbqu1myaW-drc-CUeCLGQsylli0GNpQdxl1f9e0AOewuq0vznrM9NIKD4txbt$ljd4jSd1gEhOKSm9u-Y-Q2bgXuAfySq48uXx6fpZ7r9OQieO$VWfnIy2ILsQzxhvIsRiGzUVqqM6c6nZyLZ4z1TGSRJZ8OZz6I0s$pBDl+0-$Qz1mVPsipZ0oIUsdrISWiUukMKQ-94EqCdlZjjoX29svRNNlP$TgpbO8xybwzzN2kP8F4EwO2YCklimpcqqA1swpcSjaZTm-CkabgSfGTGRFFSOeXAbr4PX1t1JWql3jooJ+6fyNIuoo1d9aMQNx+cnbhsYTKUnBYgOiogUDvjMgtVJ1OoxmKllzeWEXR7oPy98NO8FvT0ysXUiTEEtRYoRToJkZhPxdLEGRED-fKaK9FGE4kmoiS84S9+$vWRCiuSjaJyu9EcRgDRrlaN6dnb9RQ1$sWIQV69xsRelncgAKUjQxfRSKNA9m6T8KCdn6eIksAXpjLxxWoo4kRDKUnPYIzCT-7IAStqPyMRelJ8eaNU+1l3RelZV7aKh+1lWRd4wV0gNCT5ddc04sVtrvI8pv+klFYV84NbtlvhRsenkpoUEjLvyQge$ksIS6GZU4Rke+UOBxd36vfmXVBUfIEY+KvNRqlxVnRR0T3dVcfOp0YoJdj6lsLsbu$iaKkTyv-lG4r$7BEzjvEvRY4c$sfxoyvL8WelE$MmU9wlx7QKjh78$CgIdhVULmpG0WFK+NFSUl4VUVSME8$x9cUFEG-zUC803JcieCG-zL1kd3JQu4qYsgSIjshYKd4WYZgaCj4EgcR4lbQgST95xApp86k6yJekp3ecQlXS-aLytS3F1xlBUfnL6gj3nUFFo7BQmNVhl-NelJE8YdXTYxqc8oEE0oUrnGxcULloE$YgwRNxoUS8xSsfrr+hxnXE4$kfRrljhE8cJzTOsbGj87hacYdLE+Xro+9lnki8R0o$FKu5e7kD1PucKLJcEh7KTmAc1mlNBs0wCSetdS04iIhhsZm490qrus2n2ybhogIV1cY1k161SFrU+O+J4hzN1jcT0X720V67388m5cyUpx20g3abIJbAOqToJynLZo6hhuNGjVV6LymjYIVxhoDxjRv0xbCXudub11C7q2vwF$IRk0psbGb1sV8M+8QpuwJS6Dl5Ikm8uq0Qm9neNCQnW1AhCZ1WtwpVmv0iFL4p11gFb1ZC16$upp6CabPyrp29v8VIrxVBvJ$9wQx2dbMbwp8Sglgjm-bnaaKAxNbqN1-141M9b1CmC1M011Sye3S-91Lm4kkYejCwCidmTI0E1egm$-9buTB2mRko3U7Qao1tpgWRzVr-N0YTb14Or7Qa$VP3rjVqhr-4Kw1e1w7uo37-9a574Ggp1zod141nZX6rMjDiOdnbCyXKCBTbVm-4amT-stpV2Imgv0rJFb9m4iq+L51IY2UkY2i11CUUycycFhwCq1bc+r2xkKV47AbE1SOV3tCExmQpSUhb6peLoj11d90pbI919ywV8CrtSiG$F+OJsWuuATO9AdVBAnv0StUw6xRt$KpwD8mqEdUQcGNiZbeiO9P9vsNom7ZkK48mBksV81BKkAMWk$1bcEbranvr7+BjgiN7RkA0r0gUVTq67bgMVSiCtGa1D7i0$JtS1buDiUCK1y1qpVbub1tC70uAzYLIMk$9pkmkKredW+Gyx$kmuAju$JSgeySKb4tgZQo1wCwCwq2JM1wX9ZqBZLpBCBomlqdwZ1Lpu08lN8qmMjqv011KIM3KugfXhyfRNCm3-aiaE9B5xBT90i1wa4teGcdCsNx111+YtU11"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 0W8HB7xokdePT9OqvocFlg==$9E7vypgGWf/HfG1apA/PzQ==\r\nset-cookie: cf_clearance=BsggMaYvab1oaprztx_azQvCf1.LpUnZgwWmNGxQrtk-1776236617-1.2.1.1-9yKSu2L.lR36k8e_UQbxWFKkVLnPudcBFBMXr1OO7EnokhChKJ9UATeo6mc.OiNx3s3dszVCBoW8hKjADkVeuMCDeJQUQLkEDDzu_5gUrolg2AAQCkOiwCFXJSTY_LAeLCliUaUjNA.JhD7DkG2JznZiUPOmmtUGti9KQ0AmGSXUzZ5cgSrYsg4hNJEcNqApSHrKv0aK4bMJIhQSY4ucBY.u.pp8J5YPUPoEpickDf9GrpA0uu5O.gwAsoLSAowpeLBFvhG4zAV29GD9fsAkkayFEgLikI8OR0USTQFTV0c8Pm754sf5usdp9BKvH3NtE7iGq_QxJVoLGj3s4RQnSQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=livedrop.cyou; Expires=Thu, 15 Apr 2027 07:03:37 GMT\r\ntiming-allow-origin: https://livedrop.cyou\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec9176cefc5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T11:23:18.17825Z","times_seen":13932203,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T07:03:36.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livedrop.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:41:15 GMT","end":"Mon, 22 Jun 2026 08:41:14 GMT"},"fingerprint":{"sha1":"AD:B9:0B:91:DB:6A:95:F8:59:5F:97:F2:57:41:96:5C:89:D5:10:20","sha256":"A5:08:68:27:CB:0B:8C:2D:87:8F:42:BC:32:66:E9:AE:33:D6:1B:AE:CC:4E:7A:7A:8C:5B:9B:B2:63:E4:B4:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: livedrop.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 07:03:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euO33Jh%2BzMhTVgEa070xxVzLOW26sEHxkujNFq85BmzOVIbxTMxcVtcE%2BUVUO5ahgqO4qr0fFJL7L9BYmuAazA0wAW7utTcu%2FrYJFYNWINff6StusQdsHlzSgN6pgi1p\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ec917628b281525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":29357,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926)","md5":"3320172421fcb2ffcdf7edb4a1b59a84","sha1":"9587712ca8daf97f2a70f1b1820e189a50c9c596","sha256":"34a7cf2eec2e70072974bd8b423e01bbe6cdf786aee290e4ea07663092b7b0a7","sha512":"8a2e906ac3ce2f128e6f92a2e45bc5c4bea05ed48264e4c379586f9445c1ea24b1f8229e17e3b181106e58ef83a8628eed7377b28128f38c1032eebd5f6fae25","ssdeep":"384:YgyG/n784RewQmnsRJjaTDjd8Wae5ZS3nlXtJZr5A5c+MFgjnx/k:Ygt/n784fnsiuLVs2g7x/k","tlshash":"28d2b875727310317533d6a93bbb971a3255f003e40ac5253afc62884fcaee5d893a9c","first_seen":"2026-04-15T07:04:03.641826Z","last_seen":"2026-04-15T07:04:03.641826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":78,"dns":66,"connect":2,"send":0,"wait":89,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech+Mono\u0026family=Rajdhani:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:36.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Share+Tech+Mono\u0026family=Rajdhani:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://livedrop.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 07:03:36 GMT\r\ndate: Wed, 15 Apr 2026 07:03:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4052,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9dad1dc43dd6b73280752a1396b74a9d","sha1":"be98e292ba4b65e50edb1a1dc0103c9b0b127a16","sha256":"f2849e27d8e537bbd1dad56f971d67d4d9028864bd8e87e754875c06bdbf3169","sha512":"9015cb50681c4038d14f323c35e2ac9019e2084df204f1d5773af25b98c9a97ee3026d0dfd17ee6379e4d67873aeac238125dda6aaac091d78cb21238df51ef4","ssdeep":"","tlshash":"9a810291082ba940eb932cc113ce7e36ef0e63515814e9356ffe1cdcac9ac665351b4e","first_seen":"2026-02-12T00:34:56.37781Z","last_seen":"2026-04-15T07:08:17.806033Z","times_seen":24,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":171,"dns":1,"connect":18,"send":0,"wait":33,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/_nuxt/assets/index.js","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:36.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://livedrop.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 07:03:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 14 Apr 2026 22:39:33 GMT\r\netag: W/\"69dec225-f22c7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRy%2FazI%2B0VCbRJASIw6mTGsIAFHKvJZUm9ibI9G9zI8Zk133RrZipx8ihy1B54ifFSCcVHWrDVFPAZDrqPkVUySY6hERHFYmz444odwifi%2FWVoONG5%2Btz3Y87cZbWWaLovbzpxNcgKJgViismQJKr%2BDRDPM%3D\"}]}\r\ncf-ray: 9ec917642f45569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":991943,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62906), with no line terminators","md5":"8f3d28ae446fe625d5c005b4d73a39a5","sha1":"8a265fd8f89e9e56e2e460b39a79ceef2a51b732","sha256":"c0f9a8a3c83e40a5954cc25a1a82ff4b04f35670f4d1070c3995b1efea4d0a71","sha512":"651d99f80aedb351287cbdc90a294764635c515d38457343b3d38211baad2a916f775406c003cfc9501d382a03873ab0f2cfdd92a7ce0dc18550fd9e023d805c","ssdeep":"24576:D+IAznaVLmcZPDXrMDobwwZQ9NlreXKGHs/:KWDX7wwZQ9/ydHs/","tlshash":"5c2584c63077b3e915f46fe838a83c3014c448d194fc29bd6e4a9ad4c6f2562afe9d91","first_seen":"2026-04-15T05:31:46.901086Z","last_seen":"2026-04-17T12:38:04.380377Z","times_seen":27,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":269,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:36.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:46:32 GMT\r\nexpires: Mon, 12 Apr 2027 10:46:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245824\r\nlast-modified: Mon, 15 Sep 2025 16:38:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13500, version 1.0","md5":"65d3eea7a186c2ff5f3ed8bf89642ea6","sha1":"ea30f8dd250111e82e53180de8ad09b6f23320c6","sha256":"41e6b9f297f7d9a2df2aaa274092f76d2f72711a15ca455f7f4f4f92caf16b72","sha512":"19ce13e7d94cfd2e9a56e128c29761d853adef646954014f2dea54bf6b8518143ed4404a9cdbd4c25d3fc04fec98520adc42d3bd357840db0b6cb2fa3c031c94","ssdeep":"384:JTOTPyx11kthS/no9Xuf8F+0pxVTS385wlKEC5FU:JTdxHchYo5uf0oM5wYp5FU","tlshash":"8b52c081d7ce258bf9b505dc14a1187c4ab3642864b75fe49881c540b1fbf2da9cec55","first_seen":"2023-05-08T12:42:22Z","last_seen":"2026-04-19T11:47:25.338172Z","times_seen":1393,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":196,"dns":1,"connect":29,"send":0,"wait":15,"receive":3,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=So11111111111111111111111111111111111111112","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"3.164.240.45","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:36.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 02 Mar 2026 00:00:00 GMT","end":"Tue, 15 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0A:3A:FA:40:6C:C0:7E:88:0A:F3:A9:72:66:BF:C9:D6:99:1B:F6:A7","sha256":"2C:4B:20:7C:DA:39:7F:EC:E5:2A:8C:99:7C:69:6A:58:C0:62:51:B7:C7:1A:38:71:DA:BF:B8:3C:D1:B8:AB:DA"}}},"request":{"raw":"GET /tokens/v2/search?query=So11111111111111111111111111111111111111112 HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://livedrop.cyou/\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Wed, 15 Apr 2026 07:03:36 GMT\r\nserver: cloudflare\r\ncf-ray: 9ec91765fd9f829d-ARN\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://livedrop.cyou\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5f7dfed9ac84be147f8e4e2e474596fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ty2be2T_iL1j3xXqKT6KyO7i-QOyWRaMQwlTsQ5Gz6Rt59EzHFw6Lg==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ea4d2f59cb71ba88732066c155ce9f3b","sha1":"522d292fe88384d8ed6b931489a794335c103e18","sha256":"10e13d4c75782694042035c36bbd875e4d045f1db9ccae3645e6a8507e25bb59","sha512":"8f373bb9a291fb381f77aabc425f1dca4004b0c6157469013ac1bfc0bb2b908267df2024023a81d6e7e583b936afe94b12b752084bedb7202799d6a1dff41fd7","ssdeep":"","tlshash":"ce4165f1879920d0c7df937b89d86f9c456a18d290320543dcbd8dec44d656fab0aa1f","first_seen":"2026-04-15T07:04:03.644819Z","last_seen":"2026-04-15T07:04:11.612169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":44,"dns":12,"connect":8,"send":0,"wait":71,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/favicon.ico","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livedrop.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:41:15 GMT","end":"Mon, 22 Jun 2026 08:41:14 GMT"},"fingerprint":{"sha1":"AD:B9:0B:91:DB:6A:95:F8:59:5F:97:F2:57:41:96:5C:89:D5:10:20","sha256":"A5:08:68:27:CB:0B:8C:2D:87:8F:42:BC:32:66:E9:AE:33:D6:1B:AE:CC:4E:7A:7A:8C:5B:9B:B2:63:E4:B4:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: livedrop.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://livedrop.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6jDPGTg9D8Dqks4f%2BN5m1eT37X7%2B5jrsdrdIn8dcPa0ph%2BD3MQIHwtiyMyrt3TPHKX5U2DIsDath3Vk5Vi8SwzyO10ccuCOjOvELhDWrDNucX6t5qyBJuTvhp20dLs8\"}]}\r\ncf-ray: 9ec9176b3f70c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-19T09:02:24.355319Z","times_seen":4233,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDIxapCSOBg7S-QT7p4HM-Y.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:36.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/rajdhani/v17/LDIxapCSOBg7S-QT7p4HM-Y.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 11:00:35 GMT\r\nexpires: Mon, 12 Apr 2027 11:00:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 244981\r\nlast-modified: Tue, 16 Sep 2025 03:40:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14976, version 1.0","md5":"cac31f26b77ee8053a76a54ce2f8ce48","sha1":"c92bcfc9121164049c1b30655db9481d0e454464","sha256":"759a9000e47b028799d7a4ca602634a7ac7adf415775df070a335d18d9b66f38","sha512":"175e68a3fa2978ab4a89c5bd92eebe5c0f034ccbd6004dd708c243b561102ac7e15e267b90edb86d03c312c1849b157b544ae8045209b0c2e2b27d1b480b7783","ssdeep":"384:ekfg3HBbG7EsSXbNSX0FgF1o56xCKSEdVkSKMOk5:bI3hEEJJSXExAwEKI5","tlshash":"7b62cfb8b1b6d40fb06e4de74cb0d2e11d78b155ad6a8ee4109bef197668063852fe30","first_seen":"2023-04-26T23:36:20Z","last_seen":"2026-04-19T09:46:28.378322Z","times_seen":2981,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":108,"dns":1,"connect":14,"send":0,"wait":17,"receive":5,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://livedrop.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Apr 2026 07:03:37 GMT\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-04-19T11:04:45.114335Z","times_seen":21717,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"livedrop.cyou/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"livedrop.cyou","domain":"livedrop.cyou","tld":"cyou"},"ip":{"addr":"172.67.176.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livedrop.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:41:15 GMT","end":"Mon, 22 Jun 2026 08:41:14 GMT"},"fingerprint":{"sha1":"AD:B9:0B:91:DB:6A:95:F8:59:5F:97:F2:57:41:96:5C:89:D5:10:20","sha256":"A5:08:68:27:CB:0B:8C:2D:87:8F:42:BC:32:66:E9:AE:33:D6:1B:AE:CC:4E:7A:7A:8C:5B:9B:B2:63:E4:B4:85"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: livedrop.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec9176b9f81c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27585,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T11:23:18.17825Z","times_seen":13932203,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"livedrop.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dallying-reveler.fontmaxplugin.cc/api/is-banned","fqdn":"dallying-reveler.fontmaxplugin.cc","domain":"fontmaxplugin.cc","tld":"cc"},"ip":{"addr":"172.67.172.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://livedrop.cyou/","date":"2026-04-15T07:03:37.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontmaxplugin.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 12:28:07 GMT","end":"Fri, 29 May 2026 13:25:31 GMT"},"fingerprint":{"sha1":"FF:C9:44:AB:1D:80:02:3E:4A:9D:9D:16:1E:F9:2D:B9:CE:66:09:5E","sha256":"D9:44:FF:7F:09:14:1A:62:5B:82:92:B7:7A:13:81:95:94:8D:9B:8A:52:C0:EC:FB:45:F7:AD:03:48:F0:A7:67"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: dallying-reveler.fontmaxplugin.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://livedrop.cyou/\r\nOrigin: https://livedrop.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Apr 2026 07:03:37 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXnxZktYrGaJNhis3zruZ%2Bzyd%2BPoW1kDSWBW6xGt%2Fyeu37MXFVwr%2FzJnYunAWB27kwwMRMzmp%2FVJyCc1kI0Kc3pssit0iheRUivn29jThq%2FQKJOttfHqCJJs%2BFhvQSzMcWbuinaDllH%2FINvLPmU%2FTVrnTms%3D\"}]}\r\ncf-ray: 9ec9176bae5b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-04-19T11:12:26.624398Z","times_seen":105570,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"dallying-reveler.fontmaxplugin.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}