{"report_id":"7f3a5a6b-2e57-46fb-858e-e06650a75051","version":6,"status":"done","tags":[],"date":"2025-12-25T21:05:20Z","url":{"schema":"http","addr":"tyfmegaoke.us.kg/","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"104.21.41.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"title":"MegaOke - Libreng Videoke Online (Free Karaoke Philippines)","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tyfmegaoke.us.kg/","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"104.21.41.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T21:05:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-25","alert":"Hunting_JS_WebAssembly","trigger":"tyfmegaoke.us.kg/js/libfluid/libfluidsynth-2.4.6-with-libsndfile.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-25","alert":"Hunting_JS_WebAssembly","trigger":"tyfmegaoke.us.kg/js/spessasynth_core.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"tyfmegaoke.us.kg","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-10","domain_rank":0,"first_seen":"2025-12-25T21:05:23.049263Z","last_seen":"2025-12-25T21:05:23.049263Z","alert_count":54,"request_count":53,"received_data":25348104,"sent_data":22750,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"localhost","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-13T02:33:42.572698Z","last_seen":"2025-12-22T03:16:03.99603Z","alert_count":0,"request_count":6,"received_data":0,"sent_data":3324,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/pako.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","size":46859,"data":"","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-05-24T01:34:01.687767Z","times_seen":1782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz-synth-tiny.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1182cb78ef48a5c490fc229c58a46a58","sha1":"22f18e6ec436e6e1c212a1bd8e733e910b6cc0ec","sha256":"7c8060e1294df13604d75f44bbe14bf0d3f60a065b2a103a5d6f9f9d11139760","sha512":"e4b40348252f98352397c6ad59ce62a8ce415e7442f0958abb19cc4b1770486def1266b2220c48ed525517f7f46ea4b027b9dd67969acbbd14d641623d665af0","ssdeep":"384:eTaOCxyyXvbw0TWPyf7QSwCgQ/RO/ySDnYPo5Tbk4ijqCUZQHqA70aKmls1yFw/1:QaOCxyyXvbw0TWqf8STRjkPyvoUqaVUt","tlshash":"0b13ba8e278b9314497b65999f4b0093c951c12f1996aa48bf7cc58d9fb2c5033bcf78","size":44744,"data":"","first_seen":"2025-12-25T21:05:30.01216Z","last_seen":"2025-12-25T21:05:30.01216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz-midi-smf.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04c67bdbd79f39d11e9ddc28f39ad15e","sha1":"93a17b1053d18a9834bc0358feecf6776902f215","sha256":"bf5bf44c6d1bd51a3712dc4304395ededab0d39ed567c61a3e8e39cfc1b74318","sha512":"57bdb5b5ae016bfff906b4a128fc255a6adec35f4f0631049555b2389e672baed2808c8405895db9923b1394ab41c563368bb6199616e2797d184763009fb480","ssdeep":"768:QGZCyXjT5zzkGh5Hq6uv2yQfFY5vPHQOxOF9zRiPoLDPvdDITlOqMXomVbQf2u:QED+ilm+zVbol","tlshash":"bb33454a6ea52115c57373798fab500afb7e052b01494248fa9ca4e52fb583087f9ffc","size":55068,"data":"","first_seen":"2025-12-25T21:05:30.008627Z","last_seen":"2025-12-25T21:05:30.008627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c236e3d87805e35f11d44f03b4aa3c6","sha1":"eef82502961c05d044675f450237c54c4bbf1a91","sha256":"162e4840e9b1b2369be25e093908bf809f704086190039cd761b2e9e1b1322ed","sha512":"b717a44ba6fb8a50230db16cd3eb0335bc851efea59c59786a9f79f175c43689a5b4a41e59a35df4b712d993d8d1787bfd531a987f219aedf75e9e8ae084dfe6","ssdeep":"","tlshash":"9631ceb65ab301308567185fab1fb2e6663253133845fe573d0cc3580f88f2486aaec8","size":1499,"data":"","first_seen":"2025-12-25T21:05:30.017731Z","last_seen":"2025-12-25T21:05:30.017731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/ads.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"662f2a64d88ea0c83b2717473ef7ddf0","sha1":"9762a1476dfdb89a9db5b53df7f4926c9227418e","sha256":"8edd2eed27da8d741595eccb104de11a86c4d485de66ae7f1db8e531c7b6b9aa","sha512":"86055e1216eb2a42eaf33e16549d89af0101849adf794597abe90be02059f14dcc0aac2f29fd6c31e9fdab2c9a9041f6ed417e1a0834ce48c7f1eff41b0c1894","ssdeep":"192:qEeWh5KemyQtMSSJ7O2CfPASxAv4QG/sYVGfa8Il:qEegmltM3JS1PnxAgbBVdl","tlshash":"7f42931a197a203784b112fe5f234159eba4501b3a02c61ebeecc6c83f755654eb6ff4","size":12271,"data":"","first_seen":"2025-12-25T21:05:29.986769Z","last_seen":"2025-12-25T21:05:29.986769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"524cd512ec8fe2b60ca2cab29dfd6abb","sha1":"08c4c7d823e18bdaf7dcd300231d60b2cb3c47e8","sha256":"33a333215fb82db776ebca4a3c966fc4e06cc15248238f1bc5e2d141f915d5da","sha512":"4ea3a92ffbfdb2b983b0c8f4095fac2a3d48d93b76f9421528f3514010b831cbd2cad64d2b09b3cf9fbd95e084a6fde226298490ccd3ce974c2faf78e3e0c321","ssdeep":"1536:nNHaTf6jXPF6V8Yy0PKPdEghqLqT1ir1TnRC/1xwxT2Hse4EHFCCCdM:IfjV5y0PKjqeT1ir1TnRwGTXxM","tlshash":"e704755aaaa57125827b7338cf6f4408f73a852702454606b96c92e53fb582483fdffc","size":173622,"data":"","first_seen":"2025-12-25T21:05:29.990836Z","last_seen":"2025-12-25T21:05:29.990836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/config.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"18246ced803bb248405115c302908e51","sha1":"5987d7590a62a32962d3033c7fb72d57f2e15a85","sha256":"ad7ce56a9d1b13597a941efb2b24eedfffc1c6f52441e3f4a57ecd9917bfaa7c","sha512":"ad04ad621d2af7666031d5df66320b8106269e3a8944831a353243bedae548ad74f424e38c5c6cd73cfa85cc77306b6f2c2e8238d16fad0e73be9c18f3ec7a23","ssdeep":"96:310UW0HG7shSFlLaVwFpuwv5nJHH8q2YKmOfWMK:q3e3qFjbHcNYX","tlshash":"cdc11fb1a84b28675d72496b2b913c41eb68434ba10588937c7e835c1f7d7425292fff","size":5883,"data":"","first_seen":"2025-12-25T21:05:29.994742Z","last_seen":"2025-12-25T21:05:29.994742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/parser.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"662e9475c29eadae5c01d79d7bcddc07","sha1":"14ae33eb2465079281a12ee46758d04ed70b59a5","sha256":"0cfe03ac077bf604d914cb9b85152049d191e6fa1b19a28fc5564838c89fb5c3","sha512":"528877e02e8d511b88fc67ad097ee49a5a421958f90f349b4f9b0df323b41300ba4d5795ede57caa571ca386dfbaf67a09de093e53a1a897dd37a46e8a39af9b","ssdeep":"384:KHX2StSN2pSSSrXSVwXmtZ9v0mKDIpTSkbezWLwKC680Q5U5y6:gX2StSNWSSSrXSVwXmt4DIRSWezYrQ5A","tlshash":"de928206596a11958e3263299f47a219eba731b33900c358bfccdb002f7546da1f6fed","size":20210,"data":"","first_seen":"2025-12-25T21:05:30.006797Z","last_seen":"2025-12-25T21:05:30.006797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/index.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d861787e94ec8bfce8def20dd099c57b","sha1":"a0fef11616c602e76f1dd7817bcbf90bd044a14a","sha256":"955d20bf9ab0256edc9e5d272ca04b0f9c081aadbe0e391a55b92d3701dc9445","sha512":"e03a13a612a4ee85f27e06631a46819b395f82cc8af0552b8b02eda222c7f45792ebfd4155c0a24643e6d57513b5e0bce5216ae86a9e3f92352c152b36cdf56a","ssdeep":"6144:LDP4aHlo5VlelOwaWiPMFgh+ofFkGkFwW4KbiPITJP:LMa2nl4OwNi+ofGGkF4K2oP","tlshash":"60640164768c450b9bc9e9f5647a150543303ac5a009443ebb7cbec7bfaadc361a8f78","size":317730,"data":"","first_seen":"2025-12-25T21:05:29.995599Z","last_seen":"2025-12-25T21:05:29.995599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/painter.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1fe6667a289e28b427a01e9cd2965563","sha1":"240571ef432dbb9154fac81e77b194a7a3cf3971","sha256":"ec06c337b33ea11faf6765377bae9db1dc67d165e773108ce4f0341838afdc85","sha512":"24f0e1d908cfda70ab13ca2bd8af49b915aea011b2ec3ee63d8f1ba16d9d62e2cd252be18ea06ed93c4e820da0ebb54a970b76428b95f2ffa416195e5798dc69","ssdeep":"768:bmj4/Ct2kMxKvB1gx6WEIyh+Vj/ZroskHg8T3Q4:bm3t2kP5i4CyIVj/ZrolA8E4","tlshash":"d3238485622f54218d73a3ba9f829369f725612b5502c35c7c7d438c3fb08a191baff9","size":49594,"data":"","first_seen":"2025-12-25T21:05:30.010472Z","last_seen":"2025-12-25T21:05:30.010472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/main.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d75cff63db4d3582e92f8d616f37bdaf","sha1":"8159c565f8b78dd5ebd2d9a8e83ef9322b75667f","sha256":"7b3d02564f936bf031f51ecd310c045c797681b46b46e331a29fbb6349bd1f2e","sha512":"43df8b6ef49973f2d3fc426466317f1554f4753bc986778d755d2f1552f2dde28b802e30ecb913dbb5d0e612341b4f2e1eb8e3e34da7cb786105943aeffc2bb5","ssdeep":"1536:xLAZ0RfQ6i4sFTPdfsaVAwg2Zwq5uDPdTMsTfyPA7BT2:xLASRfeLgIwq5GPdTMsTfyPA7t2","tlshash":"60939449679e1525c972637d9f175269fb3b012f1602836c3dae82c02fb147982b9ff8","size":93932,"data":"","first_seen":"2025-12-25T21:05:30.003777Z","last_seen":"2025-12-25T21:05:30.003777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/search.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3e9292f43b7f9898517511dda05ff8b1","sha1":"7b6f0d1b8274f272ac56ffda295c168ad5c8f48e","sha256":"81c6285c930f694d43f0c7a264c325779b0e7cd05e27eb073b397f0111462b54","sha512":"0fd34060146bfad536bf7fd34152fa10cb74ecd38efe4c1a8c74ebc6f58cf4719c36dc9be3a9c2dd1ab5e86bc97880d169fe10cfe943bc5355002a7b62948aa9","ssdeep":"96:3VbMGWWt9A56HOFwnTzXIl7o0XFyfP1lwl3V34HIm13oKs:XDFOmTCoQcPg33yIWYL","tlshash":"5fd194824b6c216584766374cf4ba143fb2ab02b2302958c7ede93441f76d2491f9fee","size":6158,"data":"","first_seen":"2025-12-25T21:05:30.007707Z","last_seen":"2025-12-25T21:05:30.007707Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/audio.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"129bfe0d8ba951fb12a5263a50cf1df6","sha1":"71ed24b11d3c01add766ec2c7b9712dab858ac88","sha256":"eabf4725d08f6737ea744c0f2a9c23a80ba48fda460d35b25a4175550f1b9446","sha512":"3e1af2c7c15e359d2b94a2707ba11a7bc87e447c831900d15f502366438ba6b5d0d5bcfb0c06fd2933308c2a56d2cbbaabbc49b3e7f024b67acda5a7f3a70033","ssdeep":"384:znaPeVEfrVR6961ca7pViJFyY2k2HMqHApnMyV2zSHJMEeusr+ATs1YcE7:znaPNfy96HtViJUnHANPV2zWMdusr+AD","tlshash":"5ca230aa236e0119d6b237bd9f965059ff36462b1b12834c7d5cd1c0afb447882b4fb8","size":22153,"data":"","first_seen":"2025-12-25T21:05:30.000418Z","last_seen":"2025-12-25T21:05:30.000418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/libfluid/libfluidsynth-2.4.6-with-libsndfile.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75b753bb198a0332bc5e92fa522addf7","sha1":"6880e846af3c982d640f5b8303f9803d617b6663","sha256":"c108b7f00ed348892d46f9e6236618d76ae7f3d2b6cb860b2990c0c2ce9dc67c","sha512":"4eba9f29a0077c88975f5c3e026e4985e28dd78a94b8b58b2286520fd985fd4e6faaba070b18da3136902c89f356f5cf1e1532cabfbad3c13b636bc3981430df","ssdeep":"24576:9lgeyiSdVrPEaPo4es68xkZ9hS/tcFwzfqu+rymK80tJf23Zurjw1eTFv1PGMV6t:z0iyYglxGu+28UQOFlqbAsoIo8","tlshash":"2ab55c3383533f7beb310e46924b3d816c9c76978224eaa8ed4c95e184f583a9d6d4dc","size":2371527,"data":"","first_seen":"2025-12-25T21:05:30.018823Z","last_seen":"2025-12-25T21:05:30.018823Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-25","alert":"Hunting_JS_WebAssembly","trigger":"tyfmegaoke.us.kg/js/libfluid/libfluidsynth-2.4.6-with-libsndfile.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/libfluid/js-synthesizer.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df9f4ec011fdf6d4af4f2d1683aad752","sha1":"fb523d2579366889dd2958eba646da9464436fb1","sha256":"296f3cf76304b3650d7fb24a00263e2225e21d612fc0882234de7b1090da2b53","sha512":"ddd80da76d801661a3063f459fb3e3ee11f061cc0a5511bf8e94628b37f3edcab24ab0817d8aa625823008dda81aec19dc3fb6a15e45abd9be8a3d04a067955a","ssdeep":"768:iqxxwATqHIU4amp2YmO4eGHAb1nZEOYwBAr/igEXnue2Z24sV0y4A:iMxwcpII","tlshash":"24e2b88525e6ad27cfc9a65a63791007a6fc46c02e189d5cf42cf8de7a2e444c231ff6","size":32516,"data":"","first_seen":"2025-12-25T21:05:30.009529Z","last_seen":"2025-12-25T21:05:30.009529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/ads.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/ads.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRftVcM3O8y6rg1V4qkDa2TYHfYzUQG8ANB11IwEAEx7a4SxrneicK4pk%2FXanMa%2Bzbt%2BqRVrSgwiGMd9y6qvZbIT4xo4rHI1tOPXddJj\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"0c99d7904c192c9174591aacaaa23092\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b399b350b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (301), with CRLF line terminators","md5":"662f2a64d88ea0c83b2717473ef7ddf0","sha1":"9762a1476dfdb89a9db5b53df7f4926c9227418e","sha256":"8edd2eed27da8d741595eccb104de11a86c4d485de66ae7f1db8e531c7b6b9aa","sha512":"86055e1216eb2a42eaf33e16549d89af0101849adf794597abe90be02059f14dcc0aac2f29fd6c31e9fdab2c9a9041f6ed417e1a0834ce48c7f1eff41b0c1894","ssdeep":"192:qEeWh5KemyQtMSSJ7O2CfPASxAv4QG/sYVGfa8Il:qEegmltM3JS1PnxAgbBVdl","tlshash":"7f42931a197a203784b112fe5f234159eba4501b3a02c61ebeecc6c83f755654eb6ff4","first_seen":"2025-12-25T21:05:29.986769Z","last_seen":"2025-12-25T21:05:29.986769Z","times_seen":1,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N8.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N8.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5949\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzqU%2Fm2Og7KOY7yW2WUda%2B3h38%2BEyVFsBD5yV3oZVjF4vhvP3AahXU9o6icapypcOcfnuBO4nySFKhwOADgFJTFfISvlid7sWPFFom6N\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"f415114a7ff06c2aaaf37919864f7413\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d7c640b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"f415114a7ff06c2aaaf37919864f7413","sha1":"ebff9d6c9fa2c9e59d9cb3ca68c35d9a06a3c17d","sha256":"80890a4065765e5568ada29e01d28140840a3ed95d064cbcf7ee2677094dfee1","sha512":"60519b1894b0461824d4ab8047aed800f795a15342b6d5c3cd45977c4915ecf2372b6662bfea559a70fbc1b3bf879e4a292e2a5ebc56e5e6bf5a181b024f2e2d","ssdeep":"96:O8JToywZjCTg+jMh8xWacn/HJPepcf9C9WnzWnGDwKbT2e6:R7wATg+jMuxWaW/HJPeplAWGkcTG","tlshash":"33c16d4dd28323d4ea9193fe56391be652ef9ccf58b670d14014713c9f3b9a091761c9","first_seen":"2025-12-25T21:05:29.987918Z","last_seen":"2025-12-25T21:05:29.987918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv8.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv8.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktEr6XdneQqY4pU78y1RJqE2xG8BQvniDwqxNvFAcAjC3Wz3hxTC52bFQ4ZNbZte3QvW7DW20oU5iim6GrR8U3o4YTrVCe%2Br3H9aiK2T\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4dcca00b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv15.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv15.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZ2YshzyRyyaBeUOLfzfAy2uZqc%2Bv%2BuNqUZNYVZEzytHFmoUpyiNT1wyfzKxGAT7SzPuunMLcfMCz9GF67Op0C1nYN5mJe1xl%2F%2FMX2HM\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decc10b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv18.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv18.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83bXzJf0RSLwsImeC%2B8XLNwkZraEw%2BqiUmxD5a%2BrJRYlz%2B6ZNdQOJm%2FdWkybVmg%2BU7goQ0ru2i2bD3Dtz7IAew5L%2BWb%2BUWUP39cWtnB1\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decc50b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/soundfont.sf2","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/soundfont.sf2 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 20368642\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkIFWk25M0TVoXAV9STWbUvV7o37%2B2olcOowWm%2Bo6I47BugCGM0cLUFhYXmEtefEy1bIk5xiT%2BkOkpa4jG%2BYI8n%2BAzEdlcueFHhJxdic\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"5fe75765ec2185494a1281533dd273ed\"\r\nlast-modified: Tue, 23 Dec 2025 13:51:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 9b3b4b52786b0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20368642,"size_decoded":0,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, SoundFont/Bank","md5":"223761af3c065cea089e896929fd3d0a","sha1":"9047b4b7b178bfd40c54833da5b001d825b787a7","sha256":"ca6c1c739ed64bad6c3c58d03ff4338659fd41f1f80d60b433f29ea8c70dc200","sha512":"a2a3f20f84a114eb32ae55957ad640d5bfdc98face548132a9ad2e56b679e14273e7c719ba6d521f619c362aa2012cafefa2c500ff98d020cd9d6f5121eccec4","ssdeep":"24576:cie9CR8HKyC8vQQVs1QI7lAqMpmrQVazqmWJSti7OZ:b4a8bXIN1QI7lAqQpLJz7w","tlshash":"69251222f08b07e4e2b392369e50a48109d6fc5dec5a122f751bee45b213760beb771d","first_seen":"2025-12-25T21:05:29.989873Z","last_seen":"2025-12-25T21:05:29.989873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":616,"receive":1585,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:11.086Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dpnLv+qFM8qyclZ9dueDGQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/jzz.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0PIn7w%2B9f11L9Mf0weY9JoTQC%2F38%2F6oWDqtVnZKtaIvRA3MghWTgY5c9OvsedrILb4BApIe%2FVWVQrvM5sj7ITzWaMpfq9eNvtUdzbbP\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"524cd512ec8fe2b60ca2cab29dfd6abb\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3708fc0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"524cd512ec8fe2b60ca2cab29dfd6abb","sha1":"08c4c7d823e18bdaf7dcd300231d60b2cb3c47e8","sha256":"33a333215fb82db776ebca4a3c966fc4e06cc15248238f1bc5e2d141f915d5da","sha512":"4ea3a92ffbfdb2b983b0c8f4095fac2a3d48d93b76f9421528f3514010b831cbd2cad64d2b09b3cf9fbd95e084a6fde226298490ccd3ce974c2faf78e3e0c321","ssdeep":"1536:nNHaTf6jXPF6V8Yy0PKPdEghqLqT1ir1TnRC/1xwxT2Hse4EHFCCCdM:IfjV5y0PKjqeT1ir1TnRwGTXxM","tlshash":"e704755aaaa57125827b7338cf6f4408f73a852702454606b96c92e53fb582483fdffc","first_seen":"2025-12-25T21:05:29.990836Z","last_seen":"2025-12-25T21:05:29.990836Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/utils.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:58.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/parser.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lcx9MJHJL4wXL0ZQTgDwZDpwMTNiLVu6vShXIkXACjikAHlSmY35Sr8qZYIVnjEYbeXmB7oa%2Brp6NXA8gFLlipQxz4cN5sHcSCKoQkrG\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"cf0413a534e0c059e26fd59c6e540d0b\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3bfe170b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"cf0413a534e0c059e26fd59c6e540d0b","sha1":"4471970d913198a1b42554422820a1d6a5dfe176","sha256":"6823a01ffcef9a2b3ee297bdc12c1fad2572e0c2b82531d8d65de6cb8dd7540c","sha512":"93975b56c3c34a8291d1e5428d18915f5d6e759a408d94040e4a00e5b7fef567b8acebc43b8dc9cc6fa3af7e83324ae83564323a0ea63f97f3d142eb0cb4424d","ssdeep":"192:1YOm4iU4wlNlir5aw+774t+ZqXAAvf4JiAogZqUTQKu3n:KXfAXXw+77++ZqXAOAfogZq2un","tlshash":"be128340178a1219d13667ee8f0b5408f2bb552f3a03115ebe7d96c52f34b6082faef8","first_seen":"2025-12-25T21:05:29.991865Z","last_seen":"2025-12-25T21:05:29.991865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N9.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N9.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6576\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8vOeufol%2BLgNvch75KgskXi%2Fi6s1tNJCzIgpdDfcoHTwlb1RHbSdczKn4quHGn86GTrL40%2Fg%2BDg46tc0%2Bob%2FDHpKt3bi2g41JZcv0Ya\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"8d9e4b89e9ef555327b6cb291278fb44\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d7c660b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6576,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"8d9e4b89e9ef555327b6cb291278fb44","sha1":"24f373190fb56474fa8086aaaf1957fc9a829c1c","sha256":"c938bfa9fcac1a599e8f71c11415dda512336307cb81bb76aa7c58197a5d01ab","sha512":"55d0e6a71b97aa679ba82775541f800388e13051e14ae40df366d5e00c50c901ab24cafa47b96db552d6fd4bcf0f9386ca1a0c95a63f0c42185a411a71b2d8e3","ssdeep":"192:RtBQfxVDU/oG4bZl5O+sAFmYUoGlcXUHq3u:fBGvU/Z4bZlvsKQoGDv","tlshash":"53d17d30218668d1f5ed8b3f10a8a93fd6adfd8b3931b9c0580576a1e7329fd70080e8","first_seen":"2025-12-25T21:05:29.992826Z","last_seen":"2025-12-25T21:05:29.992826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv6.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv6.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hb8qNbluSp85tXZIA0lXqMi8N2TED%2FW7RmLM%2FyMJlWqP7%2BShNVxO3vCkAXq1Zq7H5V6HUHwlvp9fYPFENDFwmph9cWf20oIeHzzPXeP\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4dbc910b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T21:04:55.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CG2NNCmoI9jllCLjY1m48D%2BYOwuZdsfut7yZOLNVd%2B0WJXQILpyXmMzcy8bi%2Fv9R%2B7Qlq%2F09Ibr%2BHPSCKbbtp6ml8%2B54JZ%2BLRLZVBFkO\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 23 Dec 2025 13:49:47 GMT\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b2f5b0a0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9014,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4c8b8090d399200ac527d7d262218896","sha1":"865c728df7f300f360edc26f6b5b664960ef628a","sha256":"611f59bdca148511cf9322cf9456015c94c883c5ac39e22329e5b8ce8d33a492","sha512":"6665d982054f208d9a5e6e467262cf4c7a69a319e7718eeecd739a5a639af5a6e92c6b045a1af17dfe36ff3f77f61bee5051758945f563ca407a1b4158219049","ssdeep":"96:xuTBa4pmYzNkeB60Gdc1cvwbQk/4vVWVmj2N4jExBC8:wI4pVsdZ5c4vb2N4I68","tlshash":"8402fc6188a6043540b3c1966ef5ab9fff619307970a96413aec57db1ff3e08cc4b968","first_seen":"2025-12-25T21:05:29.993844Z","last_seen":"2025-12-25T21:05:29.993844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1480,"timings":{"blocked":229,"dns":212,"connect":1,"send":0,"wait":1021,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/config.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdEo1wttW0biwDK5TY0WjDmxyIsri5AdwuV2ovXqpeNsFOde%2Byu88l4bpuUuUYa8DtEkvKjTb40SCD%2Bg4ox8U7Ua4DW5RQqWbIXO0W%2Fk\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"18246ced803bb248405115c302908e51\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b398b270b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"18246ced803bb248405115c302908e51","sha1":"5987d7590a62a32962d3033c7fb72d57f2e15a85","sha256":"ad7ce56a9d1b13597a941efb2b24eedfffc1c6f52441e3f4a57ecd9917bfaa7c","sha512":"ad04ad621d2af7666031d5df66320b8106269e3a8944831a353243bedae548ad74f424e38c5c6cd73cfa85cc77306b6f2c2e8238d16fad0e73be9c18f3ec7a23","ssdeep":"96:310UW0HG7shSFlLaVwFpuwv5nJHH8q2YKmOfWMK:q3e3qFjbHcNYX","tlshash":"cdc11fb1a84b28675d72496b2b913c41eb68434ba10588937c7e835c1f7d7425292fff","first_seen":"2025-12-25T21:05:29.994742Z","last_seen":"2025-12-25T21:05:29.994742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/index.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:58.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/index.min.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/audio.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyLOQMS03d230%2BULnI%2FVNejiRLcY0wfHCBIMThTo%2BiHFhOvfCzC%2F0JYsekHYf2AVBC5FCovuSdlsxmd3msQPlbGYL8xLXTxWgxggPZHc\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"d861787e94ec8bfce8def20dd099c57b\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3bee0c0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317730,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65295)","md5":"d861787e94ec8bfce8def20dd099c57b","sha1":"a0fef11616c602e76f1dd7817bcbf90bd044a14a","sha256":"955d20bf9ab0256edc9e5d272ca04b0f9c081aadbe0e391a55b92d3701dc9445","sha512":"e03a13a612a4ee85f27e06631a46819b395f82cc8af0552b8b02eda222c7f45792ebfd4155c0a24643e6d57513b5e0bce5216ae86a9e3f92352c152b36cdf56a","ssdeep":"6144:LDP4aHlo5VlelOwaWiPMFgh+ofFkGkFwW4KbiPITJP:LMa2nl4OwNi+ofGGkF4K2oP","tlshash":"60640164768c450b9bc9e9f5647a150543303ac5a009443ebb7cbec7bfaadc361a8f78","first_seen":"2025-12-25T21:05:29.995599Z","last_seen":"2025-12-25T21:05:29.995599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N6.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N6.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6785\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL2zQ531s%2F0%2BNUz4QHFHF9LRJUIi5URUTW49aciPWN4%2FvHf5HCYqipJUoo5CA%2BSumgMccGjZ10oZnMx9BNFkoqPrTfDFeglRS%2FY3%2Fdum\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"8ce2055aadcfb75121d53d49b7c19b64\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c500b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6785,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"8ce2055aadcfb75121d53d49b7c19b64","sha1":"f6013a3ec289699645864a17a7ff8aa6bbd0f1c6","sha256":"dd3fe6f24316a34405b6148dabd0cdb880196d5edbb032ec0916672422868fe8","sha512":"f83f8df8f410b73b388d37d46e38a8cf3787b458ec90c5d63658c39a2154f6aa2c1735ecfb0166ebdf2428e1f927f72b5261083b26c489c41af9f22923b0e124","ssdeep":"96:O8JTvcZd5jRwq0aL4hOtFnOaaIBOxpCzO/6U6RUswLtI+WuHjyglloaS8RKNOqGP:RkRdwqghOHOaa/J16eswLOHuDoaS8Rh","tlshash":"5be16d236608b3c0c9219c3a90512fc350ddcff78ba051d964bbff2a697ea822e81512","first_seen":"2025-12-25T21:05:29.996789Z","last_seen":"2025-12-25T21:05:29.996789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/libfluid/libfluidsynth-2.4.6-with-libsndfile.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/libfluid/libfluidsynth-2.4.6-with-libsndfile.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2F%2B5d4R2aSk%2B9K86UIdghkI7HDUI%2BTE7nqU%2B9fEWifBno5%2FDmO7QNFDFR0gxTxcC2G%2ByqekPCz1jFzo4%2Fw5iHhSrEEPBhWNaFMyyELuF\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:13 GMT\r\netag: W/\"75b753bb198a0332bc5e92fa522addf7\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4d7c670b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2371527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"955048a174fa675fc84eb88bf37d140c","sha1":"74e91b62aba56fcd4f12059d11bdcaceee3cb0c1","sha256":"acac809f12fba0d6a35e143a80ff304e3d66ab7575a378be9733731bd79d4648","sha512":"a40bbf6c069b2087116d899cabbc7acccb3e867e2898767c7c3ceb2ffcf2d40a55a25bce9d458a771b4f8c3e7081f42737c96b2934baf7577df0777d964cf135","ssdeep":"24576:9lgeyiSdVrPEaPo4es68xkZ9hS/tcFwzfqu+ry6:z0iyYglxGu+B","tlshash":"48252b3683933f3fe7314a55524a2e46acdca297d3682be8ea8cc4f1d4d087d495c5e8","first_seen":"2025-12-25T21:05:29.997767Z","last_seen":"2025-12-25T21:05:29.997767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv1.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/BGV/bgv1.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14159298\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZmAAgFCbSi%2BGcgwqg9JYknmwiSs0l3dK%2FVd8pXwL67QGUPG8NCAedacP2GAns%2Fa7Al3tUUtqyDRU17jpFOWw9BwMP54zFYdzxrTVlOC\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\netag: \"64fa0777649038c5b471fe91240f6b2e\"\r\nlast-modified: Sun, 21 Dec 2025 11:48:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-14159297/14159298\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b396b090b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32768,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d0c1a064fb18fa772936122d34ab3786","sha1":"91080b10684afcf01ee927e04337bea247b0d033","sha256":"1a5dbc4f94997dff2f96803dfbf8e2d8c44d8f1126bc6f8a14914a6e1fa8d87e","sha512":"75564897ffa6fd8de56ed655b6673efcaa305216267dfa46d7575b3e20c6bdeac33da43abec516e6a182631fb10535f1f8b6d4e066ee42018be96b2c00fcf894","ssdeep":"768:TfKqbCQkkujXInWbwO2oMDyo++R0XFYjPGj5CGh4:rKMC5XIW0foUyE0XlgGh4","tlshash":"f2e2f1234647149868eec7af03ded9828a9007b97ffdce294624c7a4d73e1d18ba3142","first_seen":"2025-12-25T21:05:29.9987Z","last_seen":"2025-12-25T21:05:29.9987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N4.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N4.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6367\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DSjzAliFF2atcuZH5Bbmfnr4E59J4%2F8tzRI%2BpznvbUxWO3iyixhio07Ut%2BjD%2FjJoIPc2K1b1N2Kim%2Bb49Iutcf1Lye0v%2BZw3G%2BoDYed\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"a1aa41dc9860355c6d3d6ce4f9ce9755\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c4c0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6367,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"a1aa41dc9860355c6d3d6ce4f9ce9755","sha1":"1617635c0e3cff93be1d7f08e8f6597120cf4a02","sha256":"f58804c40a6530ea5bd52c3b933d08141b1ee57b7143b2e944eaa8e7655f44c5","sha512":"1cd3c20f6cc003ba81678e49e0a81db5a06062f81d9e1aaa1a637890fd6a7099695ae6f36b1c5107e38a351d1c5432867bc5e3ae183cb5cb4e9c77450efca1ef","ssdeep":"96:O8JTPzaZ3Z9G0ZgeELYjbvfzfdMtQwB06aiBaGiOUdvcr:RPmZ3ZfSovfzfd+J06aiBaRny","tlshash":"cfd17d4815962598e10a50b80aa97f8348c99fbf3b84b1dbfba57a2c0d74714f537018","first_seen":"2025-12-25T21:05:29.999593Z","last_seen":"2025-12-25T21:05:29.999593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv1.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv1.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14159298\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ei4WPT4CfOd9McErBBApO%2F2nS1nUZPWplX54nTjNS8Oe%2FNuW7Ukt5IuRowJNqk%2FOYMxf5hSb8JkVx6%2B1zT6FducfLGLmvArK8Kmm%2FXu0\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"64fa0777649038c5b471fe91240f6b2e\"\r\nlast-modified: Sun, 21 Dec 2025 11:48:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b3b4b4dac7f0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv3.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv3.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14118258\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAodpoQZ%2FTcLNXLA9RrHM5lffeX%2BQdvAI1ALuzNOcJWXJTiA8peLqJOpa%2BVc42xaY34myVxHsjdzIPmq%2FylzR2pTDldAT7mU2OlHHUml\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"c5c6b3ba04221056bc9a0f0b5a220004\"\r\nlast-modified: Sun, 21 Dec 2025 11:49:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b3b4b4dac880b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv14.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv14.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okXic6pTp219L7%2BHs3ZzADbcbpnvePwQqTuYgyj5rG2c%2B%2FAXELkbY26s0aKfybtOGgvj9EUrU6gybv5kON736RTd9jigoM468clNSAKb\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decbf0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:11.895Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 2s8fhurpc5XKxKeFzu+SfA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/audio.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/audio.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LhqM6MzMxzrKC1JtiOxQ%2FPLl11ds6eLaArxmPGL%2Bz8V58ZiZ%2F4bKw0Pfu%2FiPe9LjvFENshZ2s2XzaNvEbTG7Yvol1fhr3GfCVFNxUB2\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"5f0df0eb3747f0ee0647814579c22592\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b399b2a0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"129bfe0d8ba951fb12a5263a50cf1df6","sha1":"71ed24b11d3c01add766ec2c7b9712dab858ac88","sha256":"eabf4725d08f6737ea744c0f2a9c23a80ba48fda460d35b25a4175550f1b9446","sha512":"3e1af2c7c15e359d2b94a2707ba11a7bc87e447c831900d15f502366438ba6b5d0d5bcfb0c06fd2933308c2a56d2cbbaabbc49b3e7f024b67acda5a7f3a70033","ssdeep":"384:znaPeVEfrVR6961ca7pViJFyY2k2HMqHApnMyV2zSHJMEeusr+ATs1YcE7:znaPNfy96HtViJUnHANPV2zWMdusr+AD","tlshash":"5ca230aa236e0119d6b237bd9f965059ff36462b1b12834c7d5cd1c0afb447882b4fb8","first_seen":"2025-12-25T21:05:30.000418Z","last_seen":"2025-12-25T21:05:30.000418Z","times_seen":1,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/favicon.ico","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:59.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:04:59 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aO7yqe6carh8BdzqjfB%2B2ybEGriZMcC0OLH1d%2Fs6JMqXXoJPQGh3xE64kzmzS5r%2BOluFqemt%2BZlF16oS%2FOCd3v31E06%2FPTDZvgG3sdm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b426c790b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-05-25T14:47:59.075214Z","times_seen":31798,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N0.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N0.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7203\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ds4CK6QPyZzOazDS00x0yPU3%2FT8puW13djWr5boXN%2FU8wMQPdjlC27BJ0%2FeQZompDmJrtOe6SqITdk4ItGRQxukKGln2sUfe%2BcEZpSXJ\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"644d994230b212ff586444110daf1aa9\"\r\nlast-modified: Tue, 23 Dec 2025 13:49:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c460b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7203,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"644d994230b212ff586444110daf1aa9","sha1":"bf07b9ce7dacbeeb0ea5cb27ce0bd8f79d8439f9","sha256":"b331dd38546c6dc9d5cc803c6666c6eb52c464ed4d75a86e596eab84db52d1b7","sha512":"d6bfa7326a79b496a21e57311b9087b9c00e08a2ad50a31972fe97f7f13143af95a470361fbd499dd38d0df4ddafea652fb1c0900f03d4f810cc810e7970cc2f","ssdeep":"192:RAW4wQHtB+3FnKK6YFsCf6uIvM4nJsIrG88Q:EB+d56YFsPU4JJi88Q","tlshash":"cee16e14b6002af7d8d05ab65288b9d3529fcecfa112b0d06d51f2c42736dc5aa34dcb","first_seen":"2025-12-25T21:05:30.002211Z","last_seen":"2025-12-25T21:05:30.002211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N2.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N2.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7203\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9bgKLwCkQGANge8OH4kN7Tidf6RhZAaeh%2F4S2R2wqhzLpg0LLAuTQIy%2BxCrrEG2tJk9AF85lLUhm4P%2FfA8TWwiGXQt8OY4ZgrDcs3qi\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0f592cb95d5d8c8cbbea65112e946a32\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c490b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7203,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"0f592cb95d5d8c8cbbea65112e946a32","sha1":"cc445b37583ed0702a89dd1310701cd0314445b0","sha256":"6f008a125c2021a4158ddcbd9a33a3713a676dd6d28ce1b4cefe078566eeb8e5","sha512":"85963636d958b23a8b483919950deb8c9163b34b92023a54655acb63a2905785be4cef6d571bc977efb9e488919f65acefcc15a358543c8e4c95b77f56881f5b","ssdeep":"96:O8JTkhs/fXVCGCIz7jCzQUzPA1CvRqVwAQjJZ:Rk2fXdCIbCzQUc+rAoP","tlshash":"85e15d40afe1747ce205b37f401227b3379c6a5122453af21d6aed63a45e2c32c8a905","first_seen":"2025-12-25T21:05:30.003029Z","last_seen":"2025-12-25T21:05:30.003029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv11.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv11.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McrL6UbVVatqTxUFHxgpU5%2FG5%2Ft03%2BDGM97Ei4ZkCqgS3BFXR83vt8mEDZ0fbU6BSFeLkA2QBHYYQPqciXv8fWPAcc1Q7zCaCNKqc06J\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4ddcb00b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv13.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv13.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1Jvvr%2BmABCQuwDLikfBt7Le0Jkxxfwlf3waaRk5XCoAPg39ZHhVmUOHH5SnARhVVN2i3rBSo2%2FfKTuRqMW1ZD2FhHBf3m2562bH8II%2B\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4ddcb50b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/main.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1PjAPqmdTs7CrbqyrqF78nEhS1gNuCiiSNXsFzMjOw1XW57lNRsMivx%2BnEjpTPQHkf34iuw7%2FYWm2hXaPDYDzLvuPVDt8VGKozOBBqV\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"a89dc1c04f21996dbe62f2bc7d590b00\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3719000b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93935,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (393), with CRLF line terminators","md5":"d75cff63db4d3582e92f8d616f37bdaf","sha1":"8159c565f8b78dd5ebd2d9a8e83ef9322b75667f","sha256":"7b3d02564f936bf031f51ecd310c045c797681b46b46e331a29fbb6349bd1f2e","sha512":"43df8b6ef49973f2d3fc426466317f1554f4753bc986778d755d2f1552f2dde28b802e30ecb913dbb5d0e612341b4f2e1eb8e3e34da7cb786105943aeffc2bb5","ssdeep":"1536:xLAZ0RfQ6i4sFTPdfsaVAwg2Zwq5uDPdTMsTfyPA7BT2:xLASRfeLgIwq5GPdTMsTfyPA7t2","tlshash":"60939449679e1525c972637d9f175269fb3b012f1602836c3dae82c02fb147982b9ff8","first_seen":"2025-12-25T21:05:30.003777Z","last_seen":"2025-12-25T21:05:30.003777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/style.css","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xpp9tUs6IntZ8CDRmWGeqv9C5LJnTr53EKJTx%2BbigJpu4uJstXp1J62xv8Fwfr7OmvfGXQTXx99eKazFsVLjCTDxuVSn%2F24l5PVw8CU\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 13:49:48 GMT\r\netag: W/\"fd46086919ed7e2e6367a8fe8f6cd065\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3718ff0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"82100d97893e67179704bf7417e15953","sha1":"157ef71c44ae3611695fc8c44e89aa035b27c27e","sha256":"398d6d25de84020826826ce847272b8266db1caff4867bb25252247796ad220f","sha512":"78ea025e9104047d3c4af4867d08f11ef27216a8227dfd74da6768c082388c35c4f8143dbf74745caedff2e4b58f7b301afa72a0a5712089868d53664f94194c","ssdeep":"192:Tz6+BPem1jOxlUXwQBHviF6gpN82MZQCJClfjd3Xi46uJAmuyew9+jPCAv81ygsu:Tz6Wem1jOxHRYoB888pcv","tlshash":"c1c2772aab0321015137d7ac3f9a1668d769505bcb4263ec3fcce2568fb55b481a2fdc","first_seen":"2025-12-25T21:05:30.004606Z","last_seen":"2025-12-25T21:05:30.004606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv7.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv7.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xw1NUJ32PveekM24kE6fVMVLkH2aBQ%2BtY1HfXov3t%2Ft%2Fsxd0VOgZcw6Im3Zw9tkHFNRW4TN80EsUBXmGPogWFtZzV2VP0um3W2z1Fnp6\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4dcc9a0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv12.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv12.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7k1DlYwpK%2FnX9bt0Y6wIJPB%2FAvwtaHvrW7XRN0oRZlOLvFdNukCX7dFX3AJCS5APLoSMuR1V17LN%2FnNIW3RlpH8JwrOtCBAetGr%2Bu0uI\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4ddcb40b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/IDX/MEGIDX","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/IDX/MEGIDX HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 916429\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66mbeEuTufiPjAf9rspBofnsRQ5C6LmWPUzOIg63oRUPePTREdGYYiPUyv0qikTMou7e%2Fg%2Brn17gUYvs3Ecyw1%2FO9RrBnzucuknA68Fb\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"e837c1a2f4a660836edd1fc7f8af016c\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 9b3b4b4deccd0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916429,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e837c1a2f4a660836edd1fc7f8af016c","sha1":"1d75ff1813a536da96e18d96d9e1a333d3184c65","sha256":"b79abed8fb53dd231106bc518c397bbd4d998905e139c25141f65908dc6627c9","sha512":"3694ed1f33b8119a926c0a616af8e9f5bb8f4c1fac014fd629a510c6738b55a45cbf81b966fbaebd024065a28e9158540e684cda1a1735dd530b5cc93c8d3b10","ssdeep":"24576:DC6lV4GA/DMIlj2OskMwnAsbTXArCyYomYfkrGDlm:DC6DA/DMIEOskgsb7ArCyYomY87","tlshash":"7f157c4bf2731fa822d98777493728f6f8442c26576266290c3a9396fa1317c1ff5b18","first_seen":"2025-12-25T21:05:30.005367Z","last_seen":"2025-12-25T21:05:30.005367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:13.104Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 6Mob6zBKHzsrMayTXhlMDw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/pako.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/pako.min.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SC0konZ1EUFcXPqAqeu8bOhPWL108w9mHE3R4naDCrFjHTWXKP00STEfjYfwqlIC7VjjJQq6xxkqTocHx5sLfAHo5dtwcVlU8FBze1G\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"e647868246b70926c4d716f7640bd51a\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3708fa0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46785)","md5":"e647868246b70926c4d716f7640bd51a","sha1":"c64471d33f9a3d20b5d9219159fe102d8763adcb","sha256":"ede2693a4a6a5126b9d35669062b358ecab6ae7b9b86a1cf302feb45a8514907","sha512":"8364de016c3918f9d7ef3d0a9fc9c56d87de1dcbc0bbfb71e9dea6acb7bff749a40b13be45ca6dc98a64b14cf7e443b7dfb17cddb6707265321e21da9aca647e","ssdeep":"768:fXHw8wA4ZIlEf4WLNiAAAAAA84YrI9OVsLMeu/pJCU5ejR9PNB57szzsE1s1A1m9:yeBomKTCsJ6b3","tlshash":"3423f8b221f754691bd01cd880970ba162b091722c4655f8e77c9ce538b0adbf0bfabd","first_seen":"2023-09-10T07:22:30Z","last_seen":"2026-05-24T01:34:01.687767Z","times_seen":1782,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/parser.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/parser.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ho1JqtwuZ8XiBbvknV6Bj7OeSOG0zRU6Pnoxz2R9SzpSCDCsJuEJ%2BRKM4anNW4WgDK8%2Bn5JuQWHMcYskw9MeleZFk8l8K2528hAdQr6\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"662e9475c29eadae5c01d79d7bcddc07\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b399b290b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"662e9475c29eadae5c01d79d7bcddc07","sha1":"14ae33eb2465079281a12ee46758d04ed70b59a5","sha256":"0cfe03ac077bf604d914cb9b85152049d191e6fa1b19a28fc5564838c89fb5c3","sha512":"528877e02e8d511b88fc67ad097ee49a5a421958f90f349b4f9b0df323b41300ba4d5795ede57caa571ca386dfbaf67a09de093e53a1a897dd37a46e8a39af9b","ssdeep":"384:KHX2StSN2pSSSrXSVwXmtZ9v0mKDIpTSkbezWLwKC680Q5U5y6:gX2StSNWSSSrXSVwXmt4DIRSWezYrQ5A","tlshash":"de928206596a11958e3263299f47a219eba731b33900c358bfccdb002f7546da1f6fed","first_seen":"2025-12-25T21:05:30.006797Z","last_seen":"2025-12-25T21:05:30.006797Z","times_seen":1,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/search.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/search.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ORRFUSdtkgwUZrmnNRAoU7FjY2lEj1Nps5tQRHwzbAMt3v7SO0Y108lA94NIy0wt%2BQAT0VA%2BWd7vvfnkckT8E5xQZ5oLznPMRPm%2FPbb\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"3e9292f43b7f9898517511dda05ff8b1\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b399b330b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3e9292f43b7f9898517511dda05ff8b1","sha1":"7b6f0d1b8274f272ac56ffda295c168ad5c8f48e","sha256":"81c6285c930f694d43f0c7a264c325779b0e7cd05e27eb073b397f0111462b54","sha512":"0fd34060146bfad536bf7fd34152fa10cb74ecd38efe4c1a8c74ebc6f58cf4719c36dc9be3a9c2dd1ab5e86bc97880d169fe10cfe943bc5355002a7b62948aa9","ssdeep":"96:3VbMGWWt9A56HOFwnTzXIl7o0XFyfP1lwl3V34HIm13oKs:XDFOmTCoQcPg33yIWYL","tlshash":"5fd194824b6c216584766374cf4ba143fb2ab02b2302958c7ede93441f76d2491f9fee","first_seen":"2025-12-25T21:05:30.007707Z","last_seen":"2025-12-25T21:05:30.007707Z","times_seen":1,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv4.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv4.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iomRSgAD2GAYBqhdVCBGBnvjdZOBKGhUfaF07MRrmggKfuVkVvAcxFU5TF%2Ff5CgfzMwaaQDZiEb78OuS1oC0JJ1Ulx2iMNr2fkJITcX9\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4dbc8e0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv16.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv16.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8q2augPr9ZtjsGu5%2FWCSqNuVQy3JowwtXnfrU%2BSXpElMikgZE8A699R6HdTvr24Cq7SgL1O83di%2BvI%2Fkezrf9FR6BoALd%2FUS%2FDhbNeJ\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decc20b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:02.084Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZMPvRbRSTp0kYXSVaZFReQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz-midi-smf.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/jzz-midi-smf.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2B%2F7%2BYNVYgq4WsxLc%2BXqC4zd71Kwa4%2BVzDLwNY9POZcmAKi1CGmQZ50I3GOLdvOvTV30UlEbngtWZ0CMz88lkUFWRbWcf24ZPFqyyMYr\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"04c67bdbd79f39d11e9ddc28f39ad15e\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3708fd0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55068,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"04c67bdbd79f39d11e9ddc28f39ad15e","sha1":"93a17b1053d18a9834bc0358feecf6776902f215","sha256":"bf5bf44c6d1bd51a3712dc4304395ededab0d39ed567c61a3e8e39cfc1b74318","sha512":"57bdb5b5ae016bfff906b4a128fc255a6adec35f4f0631049555b2389e672baed2808c8405895db9923b1394ab41c563368bb6199616e2797d184763009fb480","ssdeep":"768:QGZCyXjT5zzkGh5Hq6uv2yQfFY5vPHQOxOF9zRiPoLDPvdDITlOqMXomVbQf2u:QED+ilm+zVbol","tlshash":"bb33454a6ea52115c57373798fab500afb7e052b01494248fa9ca4e52fb583087f9ffc","first_seen":"2025-12-25T21:05:30.008627Z","last_seen":"2025-12-25T21:05:30.008627Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:15.083Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7a6KNj1xq3TXkJKSMGn3FA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/libfluid/js-synthesizer.min.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/libfluid/js-synthesizer.min.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekN8a7r0iOuS6KKfiB%2FHqi0cvMEb4yZ941uE8SkDV0erWENsjo0kavz%2ByCMkyAAxn%2BttM%2Fps%2Fi%2Fd4xvpWqhDVrhoAWCLci8CWHqQUhOv\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:10 GMT\r\netag: W/\"df9f4ec011fdf6d4af4f2d1683aad752\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b508edf0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32516,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31023)","md5":"df9f4ec011fdf6d4af4f2d1683aad752","sha1":"fb523d2579366889dd2958eba646da9464436fb1","sha256":"296f3cf76304b3650d7fb24a00263e2225e21d612fc0882234de7b1090da2b53","sha512":"ddd80da76d801661a3063f459fb3e3ee11f061cc0a5511bf8e94628b37f3edcab24ab0817d8aa625823008dda81aec19dc3fb6a15e45abd9be8a3d04a067955a","ssdeep":"768:iqxxwATqHIU4amp2YmO4eGHAb1nZEOYwBAr/igEXnue2Z24sV0y4A:iMxwcpII","tlshash":"24e2b88525e6ad27cfc9a65a63791007a6fc46c02e189d5cf42cf8de7a2e444c231ff6","first_seen":"2025-12-25T21:05:30.009529Z","last_seen":"2025-12-25T21:05:30.009529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/painter.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/painter.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HznDVFUNoGbhps8ryQB66bDuZu4mYhuTvl7DvIBJp602trunbLLnOmy72tEyxbe78m4H0fgucj9rO%2BU9C6Kldo0qqi9Ws%2Fn3as3CLrXM\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"1fe6667a289e28b427a01e9cd2965563\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b399b300b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49594,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (346), with CRLF line terminators","md5":"1fe6667a289e28b427a01e9cd2965563","sha1":"240571ef432dbb9154fac81e77b194a7a3cf3971","sha256":"ec06c337b33ea11faf6765377bae9db1dc67d165e773108ce4f0341838afdc85","sha512":"24f0e1d908cfda70ab13ca2bd8af49b915aea011b2ec3ee63d8f1ba16d9d62e2cd252be18ea06ed93c4e820da0ebb54a970b76428b95f2ffa416195e5798dc69","ssdeep":"768:bmj4/Ct2kMxKvB1gx6WEIyh+Vj/ZroskHg8T3Q4:bm3t2kP5i4CyIVj/ZrolA8E4","tlshash":"d3238485622f54218d73a3ba9f829369f725612b5502c35c7c7d438c3fb08a191baff9","first_seen":"2025-12-25T21:05:30.010472Z","last_seen":"2025-12-25T21:05:30.010472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N7.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N7.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6576\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBzeLrIvAg8TGLxA0WOlGcjju9S4scmgMOHN4141d2cffkA1iF3XwdbRQzeQwIdqKkJzT6jhyi3jg%2FJwomyyYU21JjxlTjW5eOdLyg4u\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"cacea249f4c26dc8b60b75c586ed24ef\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d7c620b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6576,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"cacea249f4c26dc8b60b75c586ed24ef","sha1":"7eaaf0c919d61aa0d2e38d60a2f11df6bb9ce1fb","sha256":"fe21b0d8c40ecf4b3d254681379fec6ee46eb427d1d21e5b96c57329920ad072","sha512":"2fdcc1874c989c2922509439812c04f0e4c727ee44dfe1910e2b538ac4c171003407067def5083bc2afcfb01f23c6b929901b08e7787076fded75b57b0991d5f","ssdeep":"96:O8JT+ctydBSRGGns+u4R/sO7K7rqZdXrqZdh2t4pcQd+L+urEHs:R+xBSoGnZu8D7KHsdbsdhE4pD+L9rEM","tlshash":"c4d15b37393653f9f701863c986931e3a57d1fb8590b38d60871badd46b890a36a9c23","first_seen":"2025-12-25T21:05:30.011331Z","last_seen":"2025-12-25T21:05:30.011331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv10.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv10.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FBcsPY3NwZ5i%2FMlC8OWlV6Kozi5fvQ8m6J%2FeWTe2meLqzvUWPACXC67ToZPdFXhubebI410MM637jh3FC7I7eAxzlWv3WUKHiO0Gocx\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4ddcaf0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv19.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv19.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIJv4eEcMCEUb6L1RVkeUXId3ARsdm4DQ89Y1GSoCCMaB8gkN5IHBW6bnS1Mvmfg2jK6bJX%2BLvmUedFK7VPFtZBHyw2OeJa5V1cMpxxM\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decc80b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv20.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv20.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZ82BW3qO4%2BsqQqvaGR3%2FzZkDPS0KCIahGQ3p%2BSFNlbQAI7NTu%2BlWANJTXK2%2FOsWyCzTXRMIJQ8VOVKutf1KWqYJol5MehYxnt0PJEMR\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4deccb0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/jzz-synth-tiny.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:57.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/jzz-synth-tiny.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:57 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2B7V3S8c2QYdZyEMXuO7s%2FlpuJdNokGAHdLNrLVlcvVTLDhAkeK%2FSBFmAPqWUdHk6Q30ccC3C8yZy3z%2BItWG6MMcHZZBdzSDRaVzlQ2M\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"1182cb78ef48a5c490fc229c58a46a58\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3708fe0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1182cb78ef48a5c490fc229c58a46a58","sha1":"22f18e6ec436e6e1c212a1bd8e733e910b6cc0ec","sha256":"7c8060e1294df13604d75f44bbe14bf0d3f60a065b2a103a5d6f9f9d11139760","sha512":"e4b40348252f98352397c6ad59ce62a8ce415e7442f0958abb19cc4b1770486def1266b2220c48ed525517f7f46ea4b027b9dd67969acbbd14d641623d665af0","ssdeep":"384:eTaOCxyyXvbw0TWPyf7QSwCgQ/RO/ySDnYPo5Tbk4ijqCUZQHqA70aKmls1yFw/1:QaOCxyyXvbw0TWqf8STRjkPyvoUqaVUt","tlshash":"0b13ba8e278b9314497b65999f4b0093c951c12f1996aa48bf7cc58d9fb2c5033bcf78","first_seen":"2025-12-25T21:05:30.01216Z","last_seen":"2025-12-25T21:05:30.01216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/js/spessasynth_core.js","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:58.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /js/spessasynth_core.js HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/js/index.min.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fFfhDyF9%2B%2BVzz71rqpb5EmMXY4ezXX%2BxHocBdhqtBZ%2BfF9enoBxduqEphDQVEULjePwCWLgRHc02HV2EnTS5z4M5rerhkDEX8gJQIyq\"}]}\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Dec 2025 16:18:11 GMT\r\netag: W/\"2d33614e5a6de2b091a1763a9f2b9775\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b3e38420b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308684,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65273)","md5":"2d33614e5a6de2b091a1763a9f2b9775","sha1":"9522775dd2dc6177c0b4b00fd856230bbaa56b30","sha256":"5f3c1daf9ce32fdcd29f22c78a6ecf46c47f4f129cdb38274f0c55f5d867df93","sha512":"a783de0fdf0808b248cea1dc436fe29d06e899fe44ddf800ac1b424b4df29280f8233432195870b9bf1aeccd98d1a3c826d83f13e8b45f8ca389a9f1f9aa4fd6","ssdeep":"6144:ceklVRYqHOgrG5bBmGBKoY16comGwUvhQ:xk3lupxnU9omGwSK","tlshash":"e7647e7062622577c36165b6a06d16015c347546f44889befe4ceac3ace1ccae2faff4","first_seen":"2025-12-25T21:05:30.013158Z","last_seen":"2025-12-25T21:05:30.013158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-25","alert":"Hunting_JS_WebAssembly","trigger":"tyfmegaoke.us.kg/js/spessasynth_core.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv1.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:04:58.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/BGV/bgv1.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=13860864-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tyfmegaoke.us.kg/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Thu, 25 Dec 2025 21:04:58 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 298434\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEb9NBuK90gvE%2FiZzOXGhSBp%2FJh8wVsUJ%2FB5MAUsRVbjcGlyQG5DjPvhmyYkLS60ND4q04Qy0y4664ru%2F1l9G1tqLcjyDo9awumqV5ki\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nage: 2861\r\netag: \"64fa0777649038c5b471fe91240f6b2e\"\r\nlast-modified: Sun, 21 Dec 2025 11:48:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-range: bytes 13860864-14159297/14159298\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b3ec8ae0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298434,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"72b468965d1b29510ed56f8be2d3e8be","sha1":"a54432528cc440880c7f747e113433ec81f91e8a","sha256":"182dbfe224590449e2e6abed92c5bf80f442fe82e4a445b8a0edd0a9958f2e43","sha512":"d900a53238210ab6f6cb5328493f7b34b8a36be7a78eb1c20b76c0ce6ac0a5aad4d27a27d6d1b5fe17cdffdea1aa81b28596aec1ff9a649d0f3190f7a38b9e83","ssdeep":"3072:JJDDoDDdXIoRH54Z/kkv7voIkEs91UCFCzy0fyPApZddgXOf1HdbC+Bv:fDcvmo554Z/1oX919CzyeyIvgXgHb1v","tlshash":"96543949b3b14a2bd967537ca5d7c31432b8da48075b830b87a8f7b53d4e3ac2d851e8","first_seen":"2025-12-25T21:05:30.014007Z","last_seen":"2025-12-25T21:05:30.014007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv17.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv17.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZn7mBNxFi7N88HVV2wfoTmehLwLLzr%2BYFb7GVSNCW1ae7mkjNoCHkig74h%2BefUtcJeVkTk65APgEKGFPoC7w3mfLMnyUzby1%2FjnEHFX\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4decc40b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv9.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv9.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fILIlDZ9PxYfuaeDdTpasRo3FowV55nENSPLRs6g4jsYGAEmOJ6cxYMGwOHvQpGHRpVQf6J1zDUVmaarU95veYqboSJP3eGHYzDW%2BY9K\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4ddca80b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N3.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N3.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7412\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMwe%2BeOshlgKw6%2BNr1ZNjFwEMToiEUAc4cF%2FcJIRhz%2BbBL9aFbLPHpkPZ3WVKBpElmZOODgzG1EXXVEfoILKRSFp4Ebe2csnJaM1ynnn\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"31bba8d3e48825906b3d61f26e4cb516\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c4b0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7412,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"31bba8d3e48825906b3d61f26e4cb516","sha1":"649ca944e87a83ddcd3be03fbc8de449c186eda5","sha256":"e8197215a98d629c79b3f6dcf98b38d08f5ae2134459e97290f7df51fb71b396","sha512":"07f0d63a0cb87d94874696b2ce2c14639a83d08ed6810ba9eff5034dcff4abc21fa14636af5dc9fbe6761d3997a09772373c2088a851fa43a37d13680856b867","ssdeep":"96:O8JTVJ21gQEaDaJ/tfy3s0rXJekdfvWBXz307hX/BohtTXK9f:RVPQ18tfyJXJeMoUpohI9f","tlshash":"b1e16d5a934b249cc092bbf77143ddfb41c97d831b5af8f54b919948867c8d02e12a21","first_seen":"2025-12-25T21:05:30.014933Z","last_seen":"2025-12-25T21:05:30.014933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N1.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N1.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7203\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FY4LZDKU5tJKsK5zbf3n%2BT5CHLgNlGncCg97phThZplG86iVw%2FlvFBajy7RBfWJNLjx0avnZ58lyBe243VsqEaKYKo1SlTx3eIX2zJA5\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"51e5861bba5ede645cd1e6ebc1d9ac1c\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c470b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7203,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"51e5861bba5ede645cd1e6ebc1d9ac1c","sha1":"463f36c3ff6d6e8cc44d5bc43afc000bbf4adb62","sha256":"32be90dfa23de0ffd38c2c88e9bfc13518ddf5d4b36dcfc676d943b84e487d07","sha512":"042e0a1dfde121e4768728b4865f0f65cd7ee98f3ca3facc2469dd3823b214dc5f396be6e561c29aea521ec0a2c78eff57555fe932b57fa4d8f5df49c7638a50","ssdeep":"96:O8JTFCZ3HfNIDXTksdiUp6MVQScThnymVBTtljCVpSQwzlWCs44bAUXE:R492bTkseMqnymbt0VhwzQCsLMUXE","tlshash":"62e14b5a27a21b2cd473743520116ea30eddeca82449b9eb0856a73c7c7d4903c0a57a","first_seen":"2025-12-25T21:05:30.015866Z","last_seen":"2025-12-25T21:05:30.015866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/PLF/N5.mp3","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"GET /assets/PLF/N5.mp3 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6158\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP%2BBSit9ze1pT2hSLWdZD9VfcEXPlTblM%2FLPpeE7mM1K5zj8sgBEFK9IMR0Nfrp1WL%2FZRbS7nzJIwUhrcBAnifJ761qZIQ1KtXiJAh3i\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"c8e9e150ad4f76542ad49039e7f8a827\"\r\nlast-modified: Tue, 23 Dec 2025 13:50:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-ray: 9b3b4b4d6c4d0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6158,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0","md5":"c8e9e150ad4f76542ad49039e7f8a827","sha1":"ce7803403a0f7097f47415c4f0510a70453b4387","sha256":"5afe0016af93058c033861af2224539386c6895a35a360b33b1e57d5d2ae7cde","sha512":"8d4aa68d336464e1d18b23e6ab9cb6b4da1606ecb5e4f6fa02f88c292f802cdd53307c9e85167bdad9a64333385b4ef6b6cd44b65c5a16097da0ff47b933694c","ssdeep":"96:O8JT8a0vVzp8WI7WemvacIf9qkH5fuXPGWa9A9HZMFZKv+1eJzXHYXYx:R8pzp8N7Mvjw9HfuzaeM1eJIC","tlshash":"9ad15c92f0a46a94f94bc93148410ea7920faaad572af4d04110bf3d9979d48bd12457","first_seen":"2025-12-25T21:05:30.016803Z","last_seen":"2025-12-25T21:05:30.016803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv2.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv2.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 15046934\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9DvHY4Yw7TWx3TpcDNxYma60Cr2LSdj5JKaNLzeIsSdOErJGyuPERikFDoCO0rZy707t%2FfgyDEhdQZCNwIqxX2ZcCKWbPXGEel3SVkS\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"50341555132c4fff9ec44f030b274767\"\r\nlast-modified: Sun, 21 Dec 2025 11:48:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b3b4b4dac850b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tyfmegaoke.us.kg/assets/BGV/bgv5.mp4","fqdn":"tyfmegaoke.us.kg","domain":"tyfmegaoke.us.kg","tld":"us.kg"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:01.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"407885ae.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 10:18:06 GMT","end":"Sat, 14 Mar 2026 11:17:58 GMT"},"fingerprint":{"sha1":"67:19:EE:C7:C7:A2:EB:0E:9F:D7:56:7D:C0:A7:2C:4E:8A:1E:7A:70","sha256":"FF:EC:65:20:FD:A8:1D:57:6D:32:0A:6B:2E:56:2A:74:FC:2A:55:7D:11:8B:EE:41:BF:6C:F1:FD:4C:D3:D6:AC"}}},"request":{"raw":"HEAD /assets/BGV/bgv5.mp4 HTTP/1.1\r\nHost: tyfmegaoke.us.kg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tyfmegaoke.us.kg/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 25 Dec 2025 21:05:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iEXfdriV9Q1ImYezy2ZUknRnzlNCKaKpHaIAowEpmB85I2xBKY3urQy2Hfs9cI%2FcF3wXuL2Pc%2F0QFnTZF3mDPi%2FVNXnSdwnVNiEvoL%2BQ\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b3b4b4dbc8f0b31-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"tyfmegaoke.us.kg","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"ws","addr":"localhost:8080/","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tyfmegaoke.us.kg/","date":"2025-12-25T21:05:09.085Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: localhost:8080\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tyfmegaoke.us.kg\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: eTIWp9YXZTqB2u/le8TR6Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-25T16:16:51.319474Z","times_seen":15694517,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}