{"report_id":"874f98f1-56a6-4ac8-97f1-14090e4bb67a","version":6,"status":"done","tags":[],"date":"2025-01-18T20:56:09Z","url":{"schema":"http","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"title":"Shazysport"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-29T20:56:09Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"shazysport.xyz","ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-15","domain_rank":0,"first_seen":"2025-01-18T20:56:09.962179Z","last_seen":"2025-01-18T20:56:09.962179Z","alert_count":0,"request_count":2,"received_data":11647,"sent_data":930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-01-15T01:59:34.64043Z","alert_count":0,"request_count":5,"received_data":714769,"sent_data":2235,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-01-15T02:19:51.175415Z","alert_count":0,"request_count":1,"received_data":31508,"sent_data":408,"comment":"","tags":null,"fingerprints":null},{"fqdn":"waust.at","ip":{"addr":"104.26.4.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":38137,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2025-01-12T17:12:36.375757Z","alert_count":0,"request_count":1,"received_data":16027,"sent_data":386,"comment":"","tags":null,"fingerprints":null},{"fqdn":"quest4play.xyz","ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-08-03","domain_rank":0,"first_seen":"2024-08-03T21:18:06Z","last_seen":"2025-01-05T16:28:23.448897Z","alert_count":5,"request_count":4,"received_data":293957,"sent_data":1898,"comment":"","tags":null,"fingerprints":null},{"fqdn":"naupsithizeekee.com","ip":{"addr":"172.67.181.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-12-03","domain_rank":0,"first_seen":"2025-01-03T14:49:49.699555Z","last_seen":"2025-01-12T17:59:10.685206Z","alert_count":1,"request_count":1,"received_data":73218,"sent_data":405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-01-15T01:50:05.730111Z","alert_count":0,"request_count":1,"received_data":113324,"sent_data":421,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ptichoolsougn.net","ip":{"addr":"139.45.197.107","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-11-26","domain_rank":0,"first_seen":"2024-12-10T03:58:19.473076Z","last_seen":"2024-12-10T03:58:19.473076Z","alert_count":1,"request_count":1,"received_data":42812,"sent_data":402,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coohaiwhoonol.net","ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-11-01","domain_rank":0,"first_seen":"2024-12-01T14:41:32.792272Z","last_seen":"2025-01-02T06:32:10.19911Z","alert_count":1,"request_count":1,"received_data":28324,"sent_data":401,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"quest4play.xyz/setupp2p.js?cl?cl?cl?cacheccnull?call?cachenull?Ss","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"ptichoolsougn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"coohaiwhoonol.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"naupsithizeekee.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K6HYY1TJH3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"676409708065966b4748b9a99998b410","sha1":"bac79351a7d36d2e8f1137305fe56a6128e690a3","sha256":"da5e293df0a9e711a4d4497e9092d097590bbc0022ff88398f06aa1cf0a0ace9","sha512":"4dc276f57740918a19368546be726c3cc75f4518bc1dfa8c35db9a6877d50d0a0c4b264fbdd32e065c87f3a828031da10ca230c6b5efe6ff019b9634787720a4","ssdeep":"6144:S4E+OCIEDHUPtb1/eodbcwdlP7Y/LExu2w3RSQABSUgeyM:bELEjgtE/ExuygRM","tlshash":"ce7409de73c674229296e478507f018ba57b28a2b44cc8d5f1c9c8e42e74a9a4277f7c","size":337882,"data":"","first_seen":"2025-01-18T20:56:13.226827Z","last_seen":"2025-01-18T20:56:13.226827Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/401/8808395","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"139.45.197.107","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9474b057b8a5b5673a7663e688d07e4","sha1":"ae151c57fb66fd77b6572a8ad6bc3e6d26056286","sha256":"8a1292e43ef3ec8b8c1f07db6b8dd244c0411634c4c7473e54162eac02bf0c34","sha512":"861178e2147aed674c9ec6da37467868881c45f486d0faafdf6682f7eb61cd5cb53f4369021425c2aea598be00dbe5d5a873ebd8571d0c36537f78b0904157a8","ssdeep":"1536:Hh009qT7UqvRaZhKovXnsyxqS+gJ/JR8mEmAbucecF:Hh0oqT7Xv2hKovXsyxqSrJPAqtcF","tlshash":"0eb3a597f744b51a6a421127006f110ba126aa74f8ab40b1fdb5feb739fa409f15fec0","size":108913,"data":"","first_seen":"2025-01-18T20:56:13.247267Z","last_seen":"2025-01-18T20:56:13.247267Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/embedlivetv.php?id=boUZqydiRl","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e1e753f543ab69894b98c449e10234d","sha1":"8ed53684f57e4c1e60ef3de40bf48d9e692fd3f1","sha256":"1a0a20c8c7ace362f60bd79417d8bd1d5ab34fecd8bd335e7aa1bd3952d84db9","sha512":"bcdd0e9111e3af80d5e721159c07d37ebde864c1e7a0753e15ddc8794a0793f9ec670078145d718e20392918460e494a5925222e4f45d5082f682fa2ced2ebe3","ssdeep":"","tlshash":"b89002d94005d01011a201436722774a682106891046100282290001300270b8611597","size":46,"data":"","first_seen":"2023-07-23T19:35:27Z","last_seen":"2026-04-16T23:10:38.353447Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2faceb2d3db75ced808545e78fab94ed","sha1":"c663baa051856b64d746629a961e23bbf0fbaf8c","sha256":"c0c09020adb6f602b16d48374166b9e38ca92383a81650b6a9097c43cc43f31f","sha512":"f4669c4f8d75f5e63701ca2c7d6b4732c4f927266e76b7b1c845734c1595def88ffd87c1f5eda9132dcded65cbdd257a0125e94d4d2fcf34b1b1b7ecb941f8b1","ssdeep":"1536:K4srTGR2t4tlKitxuIZL0cW0hIptaxuNHPwrS1bwbUKzXo0:TZuaxuPwrSBcUj0","tlshash":"2673c6493254b4730ade45b68037420bf2265d98b24b802cb5bcadde2a7dd867277f7c","size":79790,"data":"","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-05-03T14:31:32.386824Z","times_seen":3718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"06c08ccc294b3c7e4ee76a400b3fa600b007ba1294901c324d092304d560f07e614a24","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/embedlivetv.php?id=boUZqydiRl","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4c4cf77651acab6986b6d8ed01bd6aa","sha1":"2accd55e775f517ae53ba5a191ddab5a1816cd3d","sha256":"3121e612c3a16d9b10e7dc51c1a0a853715f15e1fb4e26edbdd06b54c1ef6f8c","sha512":"9b93d7ee327ca53cd47a18bed59a258b726d786c951f297acce14cca0b1afa2a62a780800752a321fe960983f2a18a5e65a14df7eec7079b04819ca0434ced1e","ssdeep":"","tlshash":"1f11236865d65630a75712245a1b225d71228b337529eb463c8ec3352f52eb8c4371f9","size":926,"data":"","first_seen":"2025-01-18T20:56:13.250776Z","last_seen":"2025-01-18T20:56:13.250776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naupsithizeekee.com/tag.min.js","fqdn":"naupsithizeekee.com","domain":"naupsithizeekee.com","tld":"com"},"ip":{"addr":"172.67.181.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"92d615111d6bc45ae50303fcf145b19b","sha1":"0c7695eb5badb5f92a37c1548760f943926dab74","sha256":"79601b2822291d6565d3bf07f60dfa9f4479af1f47bf7fdb2687b4af050155bd","sha512":"ac37085ffd99847c4409c7afbff759b7f47fff40672b90f54d5a5f2b2f247cb744d75f5e8eb5e77b0e9c11ac729acffe9171593db5e9343379dcbd473713978a","ssdeep":"1536:i+TD0uScvxYMxrvkFSEZYYen4pRRNWYzAXJDw01EbjlWhso4lj:dTD0MvxZAPen4JN34JX1E/lWhY","tlshash":"3c63f9d5b5f2b5a6029e002144bf4c594bfad911120fcb74d13a6df32674828a3bbef8","size":71744,"data":"","first_seen":"2025-01-18T12:00:18.644264Z","last_seen":"2025-01-20T09:05:34.287248Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-03T16:33:11.955235Z","times_seen":460776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee0f660c421729e21dcd4c81ecf606bd","sha1":"32cc4d9a7fbfeaddd86152ecf321c9f026a8f8e7","sha256":"438ea5235f78be4fe4d333de0d36fc0f7393b17f1fb67fcb4243dd3c2d7c5382","sha512":"538ccf18274f64e03110a1256938173a37297f3137ecb1cad593142509b19dc6f98d52cfd603ef1f5c50bda0f760c983dde1a8f00b9659dc6e7b5291944364b1","ssdeep":"","tlshash":"f8c0123468248524085d54897173d65c68f219982da22886955e8a495861ea50c51ce4","size":181,"data":"","first_seen":"2025-01-18T20:56:13.25236Z","last_seen":"2025-01-18T20:56:13.25236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e994dd63417c17617c0d177ae32a01c","sha1":"d88b25b9118e8a134a9b6173afeafd409cbcf2a9","sha256":"6e239100368c88b19a0e97f360154208dbf256fc28f286cd6041acb092dd4bbd","sha512":"8fc35936ec076bf4326cc0ddd518e57e4994e94a3aa2a8335001ca6ff11c1a4b601cf2f12c7449eeafe8981a3646b53914b7bf92359ce507828771daef907ca7","ssdeep":"","tlshash":"4fd0227c282867300c6810ed3032d3ac3db320203d523804801cc80a8b30ea72c52c8c","size":199,"data":"","first_seen":"2025-01-18T20:56:13.254237Z","last_seen":"2025-01-18T20:56:13.254237Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/blast.js","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"091faec928970e76d37a3601c19fcf8a","sha1":"6441e8eebe90eb8d4a40e7c25440ff99caba3520","sha256":"eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12","sha512":"0065b4e5167b85abb85d4af6be22853d1ea16e9c0d5420173f356dd7a980374487405d8561a4a5df32dd68d2956af6c7a3f099776994e2cf6a3b0eb8df1c3277","ssdeep":"1536:HnyiwA6dLK4I7T8IVCJ0Xiyu/lpvd7TN8+Prp2s:HnyiwFLzI7AeSymrpTNZrpN","tlshash":"16732ec177d5bc8212872b77731bb1e6e82a9dd87188488ef104bc90f4bda12fae4575","size":77888,"data":"","first_seen":"2023-03-08T14:53:38Z","last_seen":"2026-04-19T15:29:45.106059Z","times_seen":1592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@0.3.13/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","size":525081,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-05-03T13:56:26.770593Z","times_seen":2376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"8290045c31005004c1773cd0501754d55030443330401d411d45d4444d7151c033d45c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-03T15:45:57.563463Z","times_seen":83056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.377Z","timestamp":1737233743377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/bootstrap@5.2.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24474\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.0\r\nx-jsd-version-type: version\r\netag: W/\"137ae-xmO6oFGFa2TXRmKalh4ju/D7r4w\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-lga21956-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 224915\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ormM7DUcbJhS73NBYqsXSUY6ejwWJIJaXnf3Yx9LNKUhtiQ9%2BzOoNm%2Bjnl7pdc6LPvHmtRB5MCD9RXNCCmz7jqwAnG0gbFmkMRmQZ7VWUoJayAH7f1K7%2FxuBs22E4BzqooE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd03bd2b523-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24474,"size_decoded":79790,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2faceb2d3db75ced808545e78fab94ed","sha1":"c663baa051856b64d746629a961e23bbf0fbaf8c","sha256":"c0c09020adb6f602b16d48374166b9e38ca92383a81650b6a9097c43cc43f31f","sha512":"f4669c4f8d75f5e63701ca2c7d6b4732c4f927266e76b7b1c845734c1595def88ffd87c1f5eda9132dcded65cbdd257a0125e94d4d2fcf34b1b1b7ecb941f8b1","ssdeep":"1536:K4srTGR2t4tlKitxuIZL0cW0hIptaxuNHPwrS1bwbUKzXo0:TZuaxuPwrSBcUj0","tlshash":"2673c6493254b4730ade45b68037420bf2265d98b24b802cb5bcadde2a7dd867277f7c","first_seen":"2023-03-07T01:27:55Z","last_seen":"2026-05-03T14:31:32.386824Z","times_seen":3718,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":15,"dns":2,"connect":4,"send":0,"wait":22,"receive":6,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K6HYY1TJH3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.373Z","timestamp":1737233743373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=G-K6HYY1TJH3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Jan 2025 20:55:43 GMT\r\nexpires: Sat, 18 Jan 2025 20:55:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 112329\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112329,"size_decoded":337882,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5960)","md5":"676409708065966b4748b9a99998b410","sha1":"bac79351a7d36d2e8f1137305fe56a6128e690a3","sha256":"da5e293df0a9e711a4d4497e9092d097590bbc0022ff88398f06aa1cf0a0ace9","sha512":"4dc276f57740918a19368546be726c3cc75f4518bc1dfa8c35db9a6877d50d0a0c4b264fbdd32e065c87f3a828031da10ca230c6b5efe6ff019b9634787720a4","ssdeep":"6144:S4E+OCIEDHUPtb1/eodbcwdlP7Y/LExu2w3RSQABSUgeyM:bELEjgtE/ExuygRM","tlshash":"ce7409de73c674229296e478507f018ba57b28a2b44cc8d5f1c9c8e42e74a9a4277f7c","first_seen":"2025-01-18T20:56:13.226827Z","last_seen":"2025-01-18T20:56:13.226827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":239,"dns":1,"connect":21,"send":0,"wait":60,"receive":80,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.041Z","timestamp":1737233744041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/disable-devtool@latest/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6161\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220123-FRA, cache-lga21961-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 30161\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WjO1QQ%2B5H40LuHBDk8XMf4niVQzJshbPHqjKKwL2779tp9BV6EuAUdJi%2BzWk1K7e4OKzhCI8%2B5tVPR2hNIrLhlwoiWhHTphJOIDCxZ2TwWubwso22qot0rHm%2BIOnBEoLT40%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd40d6e56bf-OSL\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6161,"size_decoded":17266,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-04-30T13:47:06.269264Z","times_seen":1621,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@0.3.13/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.024Z","timestamp":1737233744024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/clappr@0.3.13/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 145133\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.13\r\nx-jsd-version-type: version\r\netag: W/\"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220051-FRA, cache-lga21978-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 18913262\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=owUqpezCvW0B9qXvhiuDMU7uGtVPR8cwVZg3IjVKkQcPLmc6RVChgzoMlTcwtXBh%2F0OolgvzHRFd4ZhiUEuawfduj62NIdGL9TZlNbF%2B9lERGPQaS57iBGneykifYOFXcD4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd3fd5b56bf-OSL\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":145133,"size_decoded":525081,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f55c6c796275a41ce7d97bd160e648ff","sha1":"936285f9c8c85a749a1ef8cfc4d5e84b7ea2bc89","sha256":"db7ce4b1edd2c3701c3f2585f7cbd70857173195489a99703ab39de16fa45b6c","sha512":"3b01da86fa5b757041d7c03a186faad290c34f12fea78cc5ec53e4396491b16393c03e794bbead5a726f21c49f80894824eb65a87122c68a22cb2043ec6eda0e","ssdeep":"6144:q2ffwZI3wKqMSxeUKn5+q4Qc7vije4RDgv7VTG:qSoKqM9Upbz6R","tlshash":"c5b41b9876e5b0654393a0b8503f020b723bad6e7005a1ecf76de9e95db884d6037f78","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-05-03T13:56:26.770593Z","times_seen":2376,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/p2p-media-loader-hlsjs@latest/build/p2p-media-loader-hlsjs.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.054Z","timestamp":1737233744054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/p2p-media-loader-hlsjs@latest/build/p2p-media-loader-hlsjs.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8149\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.6.2\r\nx-jsd-version-type: version\r\netag: W/\"68bf-aLl7Qz03YAZHM45X9DROXh+vYkY\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230045-FRA, cache-lga21945-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 33475\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SG5lNReWSUR4MWTCvcK%2F55BgUAc2RLIXpbTlgQP%2FIOpawtjFSSXV8cMGH7sE5jjFh6Fb6IET8NIGuLTTjyI8%2FyW1aulCRPybIWe1DbdQZVtzi5PDGCxLcy%2BH7ndSQi4Y3Uo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd41d8156bf-OSL\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8149,"size_decoded":26815,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26814)","md5":"835f1f7feab838f171c6334abc3d14da","sha1":"68b97b433d37600647338e57f4344e5e1faf6246","sha256":"189334d0a898e2aa16794cdd1ea47a0e7c1750578173b25033049fafdf55f2a4","sha512":"4688a35bf0917776321c371677d32c03b841a7f5433ca588301e880e52d0b2560e96d9de4b110ec4d311db7c708748a04de071ca997a57cab2440276450b9346","ssdeep":"384:Gc4t/GAcXYGv6phc685vDB8vezigse+i3GTDZTQB3rErjrLqxxR8EQx3HHdTHTHQ:Gc4pGAcoQOhe5B8hgs/DGwH2/KNrPs","tlshash":"ccc2c789798511734fce50a7d43f47022632a91a6046c87cb82df4deaca8f0e60b67bd","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-05-02T19:56:16.399564Z","times_seen":710,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.031Z","timestamp":1737233744031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Jun 2024 00:00:00 GMT","end":"Wed, 25 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5","sha256":"AB:77:AE:8B:01:C3:97:E7:80:17:A2:C0:A0:8D:8A:BE:C9:8A:77:1C:06:8C:B9:64:E1:7B:E5:9F:3B:E7:EC:FA"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\nage: 987278\r\nx-served-by: cache-lga21931-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 243947\r\nx-timer: S1737233744.316721,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30875,"size_decoded":89501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-05-03T16:33:11.955235Z","times_seen":460776,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":247,"dns":1,"connect":20,"send":0,"wait":47,"receive":7,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/401/8808395","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"139.45.197.107","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.381Z","timestamp":1737233743381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ptichoolsougn.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Nov 2024 15:38:47 GMT","end":"Mon, 24 Feb 2025 15:38:46 GMT"},"fingerprint":{"sha1":"8B:23:0C:24:5C:8E:60:08:8A:8F:8E:C1:5F:FC:F7:FB:77:B8:91:31","sha256":"2C:60:B4:CF:EA:75:79:2F:FE:10:6E:16:7A:DD:10:F9:5E:2D:22:5A:41:D6:13:1A:A5:80:7F:80:DE:6F:32:74"}}},"request":{"raw":"GET /401/8808395 HTTP/1.1\r\nHost: ptichoolsougn.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Jan 2025 20:55:43 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: ebaffe9fad27b4c3c4f707cc07c4b530\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=03015567b9f74eddf53a75a36c00bbfe; expires=Sun, 18 Jan 2026 20:55:43 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41958,"size_decoded":41958,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"a03429dd2edc2707c63bcd934c37071b","sha1":"77fc79c399df0e9eb7735659a99a21f5fcbd76b7","sha256":"0084c61333af161e8624366d2af05ac9fb6da21922d6d4ed1d7d92165ea4c8df","sha512":"748e9410db0f261f39957f98e9a587660e6e2d8cb88000b2285d21aed7a81d1d76f7f11a49ff7768c0998e018408abe41f160a070be06a2e9c41087ae9e362b6","ssdeep":"768:xgdhL84eEH862Khx42HuDcBhUctkgVtTzfCbQaWyq9vGwS7ivJ:QhLW6d/JHiuk2ZrlGPI","tlshash":"aa13f1c2b758a14bb955dc7caeb87acd23d18118ad0c586d763e68b2f518d718287cf0","first_seen":"2025-01-18T20:56:13.235716Z","last_seen":"2025-01-18T20:56:13.235716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":503,"dns":48,"connect":27,"send":0,"wait":65,"receive":0,"ssl":420},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"ptichoolsougn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coohaiwhoonol.net/tag.min.js","fqdn":"coohaiwhoonol.net","domain":"coohaiwhoonol.net","tld":"net"},"ip":{"addr":"139.45.197.119","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.027Z","timestamp":1737233744027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"coohaiwhoonol.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Nov 2024 08:44:45 GMT","end":"Thu, 30 Jan 2025 08:44:44 GMT"},"fingerprint":{"sha1":"49:5F:A3:32:E2:F1:F9:FB:96:32:4D:EF:45:4A:27:A6:25:99:87:79","sha256":"30:76:29:FA:27:CB:E3:3B:3C:07:01:B3:DC:A4:97:38:91:A7:95:A3:A1:31:8A:D8:34:C6:69:A1:CF:06:41:46"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: coohaiwhoonol.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 27356\r\ncontent-encoding: br\r\nx-trace-id: f5d6febe1ef18c0ccd81428dbf252422\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 18 Jan 2025 10:51:45 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27356,"size_decoded":71744,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92d615111d6bc45ae50303fcf145b19b","sha1":"0c7695eb5badb5f92a37c1548760f943926dab74","sha256":"79601b2822291d6565d3bf07f60dfa9f4479af1f47bf7fdb2687b4af050155bd","sha512":"ac37085ffd99847c4409c7afbff759b7f47fff40672b90f54d5a5f2b2f247cb744d75f5e8eb5e77b0e9c11ac729acffe9171593db5e9343379dcbd473713978a","ssdeep":"1536:i+TD0uScvxYMxrvkFSEZYYen4pRRNWYzAXJDw01EbjlWhso4lj:dTD0MvxZAPen4JN34JX1E/lWhY","tlshash":"3c63f9d5b5f2b5a6029e002144bf4c594bfad911120fcb74d13a6df32674828a3bbef8","first_seen":"2025-01-18T12:00:18.644264Z","last_seen":"2025-01-20T09:05:34.287248Z","times_seen":86,"resource_available":true,"data":null}},"time_used":906,"timings":{"blocked":418,"dns":25,"connect":189,"send":0,"wait":54,"receive":1,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"coohaiwhoonol.net","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/embedlivetv.php?id=boUZqydiRl","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.364Z","timestamp":1737233743364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quest4play.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Nov 2024 14:01:14 GMT","end":"Thu, 27 Feb 2025 14:01:13 GMT"},"fingerprint":{"sha1":"76:B2:70:DA:85:6F:4F:01:00:E1:5E:F3:0D:3C:B1:E8:2D:C2:96:E1","sha256":"5B:5B:1D:88:26:AC:6B:39:AF:29:ED:2A:2B:57:E9:06:A4:8C:66:0A:34:B8:49:F7:0F:06:E0:3F:E6:C0:4B:23"}}},"request":{"raw":"HEAD /embedlivetv.php?id=boUZqydiRl HTTP/1.1\r\nHost: quest4play.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nvideocdn: HIT\r\nvideocdnx: NO\r\nnode: PHP\r\nx-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=84chBN1KGJ5hc7XuYWSifrbxdy32AbX45RaCyt4WrGiDrcAr4yuQogxshhOdq%2F5TVUqrr0fndfGTvLSEY%2BokDPZeIxx7okK%2B4VP0nsV%2FhtyAnxZG42uiCijHzqvn%2BrpVog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd7791f5684-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=13869\u0026min_rtt=1871\u0026rtt_var=13081\u0026sent=174\u0026recv=13\u0026lost=0\u0026retrans=3\u0026sent_bytes=195844\u0026recv_bytes=1869\u0026delivery_rate=2395493\u0026cwnd=73800\u0026unsent_bytes=0\u0026cid=aa7f36da1c425f4d\u0026ts=1050\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":21,"dns":3,"connect":1,"send":0,"wait":103,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/c.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.4.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.038Z","timestamp":1737233744038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Dec 2024 08:20:07 GMT","end":"Wed, 26 Mar 2025 09:20:04 GMT"},"fingerprint":{"sha1":"F8:FD:9C:DC:A3:BE:F5:EA:38:7D:BB:BB:E6:23:02:5A:83:9C:DB:FB","sha256":"1A:DE:67:75:F2:4E:50:FE:92:8B:24:58:5A:B1:7F:D5:BD:6B:0D:68:90:70:05:97:C8:59:50:4E:6D:65:A8:D7"}}},"request":{"raw":"GET /c.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 26 Dec 2024 22:59:25 GMT\r\netag: W/\"676ddfcd-32c5\"\r\nexpires: Sun, 19 Jan 2025 20:55:44 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AxPmdAdbD7qPue1gfbTnzXtgniWBYqDiNl7ZDLJPpUwOUpPJJHqaTHaOFlzafC0ZAz3jZ3ViTgyhrp4lDYbmfjLoYRENbP%2Bs4TwJJI4VJAd2Q1PH0a88YRqC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90417cd5ab2e56ca-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=652\u0026min_rtt=537\u0026rtt_var=181\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3187\u0026recv_bytes=1049\u0026delivery_rate=7702127\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=0f0e48ae7f268c78\u0026ts=609\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15069,"size_decoded":15069,"mime_type":"application/x-javascript","magic":"gzip compressed data, max speed, from Unix","md5":"d491e205125c47b50deb2d2c0ce96eac","sha1":"65b5ab265e89e7d81bb4cb375736dfb8240c3832","sha256":"eb1a2be0072092bd3e3bd69cedc5c4111a73e68cd103522c089242064acfd3f3","sha512":"f9f52dbaa228a5ca27894c7178fdb1529a44dd3d587f4e3875c6be63dc27faa4b73f3e5b873eeb5d2aaa3bbdb05ce4e8e0e69e7b1b3bf2872c0de9cffbfe6f39","ssdeep":"384:wsrtC7lEH4yjRHxqB2zGNABafExMggwcVDiVwEnivDFTQr4so:w976td02CNlfEKgWiCpLFTQr4so","tlshash":"0862cf0ae5ce8c5dc11049f93c151ef6a76fae647051ce459ca82b1e36adbc3e124cfa","first_seen":"2025-01-18T20:56:13.239353Z","last_seen":"2025-01-18T20:56:13.239353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":230,"dns":6,"connect":9,"send":0,"wait":373,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/setupp2p.js?cl?cl?cl?cacheccnull?call?cachenull?Ss","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.050Z","timestamp":1737233744050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quest4play.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Nov 2024 14:01:14 GMT","end":"Thu, 27 Feb 2025 14:01:13 GMT"},"fingerprint":{"sha1":"76:B2:70:DA:85:6F:4F:01:00:E1:5E:F3:0D:3C:B1:E8:2D:C2:96:E1","sha256":"5B:5B:1D:88:26:AC:6B:39:AF:29:ED:2A:2B:57:E9:06:A4:8C:66:0A:34:B8:49:F7:0F:06:E0:3F:E6:C0:4B:23"}}},"request":{"raw":"GET /setupp2p.js?cl?cl?cl?cacheccnull?call?cachenull?Ss HTTP/1.1\r\nHost: quest4play.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Jan 2025 14:58:52 GMT\r\netag: W/\"6787cd2c-b7d22\"\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncf-cache-status: HIT\r\nage: 6572\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8TtKzqrlunD16T%2FA0Guzxb6Y3WSdM4NoQwCrtzCnJy0L77CTpMg0oAsmdg78CXg27c9OSgD0obHll3JO3S0a%2BlZpr69YoFHHt3kWraHc7UoBmVYs4Ae%2FSEb1AC3lk2EErg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90417cd41dda5684-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6320\u0026min_rtt=1871\u0026rtt_var=3560\u0026sent=37\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=34056\u0026recv_bytes=1416\u0026delivery_rate=27026\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=aa7f36da1c425f4d\u0026ts=482\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158802,"size_decoded":752930,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37084), with CRLF line terminators","md5":"5a2c1544c74f3c628a965d3d64134465","sha1":"45fca4d9361fcf0ebc9e2537b34c8d46fc4dd68f","sha256":"0e55310e9ab0581000640622f701b026dd19f19ed5f4d57697dee61b2c08ed60","sha512":"9d56bce18475b3d11ec46f5a8b98a14903158fad290db442c6c753498f8429c737327a15eccad46b7ff7d3dbe381c1cd684673f5cf687c4a52c87a8c8a060c48","ssdeep":"6144:JWR/XKSf9XiJnC+Hpwgpa0nVGIm+q7paJJY1FBi8dcQ8RjUAtQq8TjXPxFCT:J4/XipHpwgpakVjm+q9cQ8R6DCT","tlshash":"93f46f40a78064d592b36f29af1ea3f5ee6b056631840807f46c6ea09ff9b1cd8d4df4","first_seen":"2025-01-18T20:56:13.240745Z","last_seen":"2025-08-25T20:32:11.743193Z","times_seen":5,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"Public Nextron YARA rules","scan_date":"2025-01-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"quest4play.xyz/setupp2p.js?cl?cl?cl?cacheccnull?call?cachenull?Ss","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/embedlivetv.php?id=boUZqydiRl","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.364Z","timestamp":1737233743364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quest4play.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Nov 2024 14:01:14 GMT","end":"Thu, 27 Feb 2025 14:01:13 GMT"},"fingerprint":{"sha1":"76:B2:70:DA:85:6F:4F:01:00:E1:5E:F3:0D:3C:B1:E8:2D:C2:96:E1","sha256":"5B:5B:1D:88:26:AC:6B:39:AF:29:ED:2A:2B:57:E9:06:A4:8C:66:0A:34:B8:49:F7:0F:06:E0:3F:E6:C0:4B:23"}}},"request":{"raw":"GET /embedlivetv.php?id=boUZqydiRl HTTP/1.1\r\nHost: quest4play.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nvideocdn: EXPIRED\r\nvideocdnx: NO\r\nnode: PHP\r\nx-cache: EXPIRED\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NrUQB7gMIwX%2FrJIqBW2ujUgKkpnt8i%2BS9ZOrxGlPz%2FrX%2B12vQYq1koWJpUpnPdrLfuZ3IenaDBumtY0I1WN%2FYM1mQiKinoN%2FNem%2FEs6CuHmYpgHKFWt2k5Eka2nVHcyzyg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd02a425699-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1228\u0026min_rtt=467\u0026rtt_var=1503\u0026sent=8\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3205\u0026recv_bytes=1157\u0026delivery_rate=8274285\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=ce39e2c84729bb2e\u0026ts=127\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53434,"size_decoded":40764,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28209), with CRLF line terminators","md5":"b750a3362e1b64f8084038763aae9430","sha1":"ef6b8ef3b613e650da1d7902d42a40ae6bf582a8","sha256":"64dcc1c593ddb168334747d14e589ea93ed9c3303d6e5853cccfbe414750ab61","sha512":"64775019c1d726e4e0d2d3e0f30cff184d3ea13e387f102ee03bbade155e62cfb6eff17b3c24ed4f1725a0dbcf33b9ae6f72b4dd11ee73b50a7cdd20b6a66acd","ssdeep":"768:yjCK72GGqQ80GaIoQPzahq/AMO54P1UiULcuYlhi/ICnzJ3+wj:yv72bGI7MOWhif7j","tlshash":"1b030856354eb916432a626150af2989e1ac4882754f4b78f71cf4323feb234c5e7ef8","first_seen":"2025-01-18T20:56:13.242435Z","last_seen":"2025-01-18T20:56:13.242435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":21,"dns":3,"connect":1,"send":0,"wait":103,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shazysport.xyz/favicon.ico","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:44.273Z","timestamp":1737233744273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shazysport.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 22:15:43 GMT","end":"Wed, 16 Apr 2025 23:14:33 GMT"},"fingerprint":{"sha1":"FB:57:CA:43:81:E2:DA:83:51:07:E8:5A:4C:AC:CE:E4:25:2F:8F:A1","sha256":"E9:1C:4A:70:54:2D:12:DC:9C:6F:32:B8:92:2C:26:B3:11:AF:80:62:F6:97:7A:1E:70:ED:D8:B0:2A:1D:3E:6A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: shazysport.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/livehd5.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: text/html\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uzWhU7OXk1gBI%2B%2B4gEODVyW0JgDrxPlCEl9cXqrl15P0hBN0jyYIbGv9APkWRh27CL8F3E90GYo1aTP4A%2BS7GzLGNLvP7Y6qcekY1%2FWS1l8dK9d%2FGsI0kiZFaF8Wzt8ZhA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90417cd58ca3b517-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7248\u0026min_rtt=1974\u0026rtt_var=4507\u0026sent=14\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4215\u0026recv_bytes=1311\u0026delivery_rate=300870\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=83f5831c2a778c42\u0026ts=1283\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":7894,"size_decoded":162,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-05-03T16:03:36.058321Z","times_seen":42595,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shazysport.xyz/livehd5.html","fqdn":"shazysport.xyz","domain":"shazysport.xyz","tld":"xyz"},"ip":{"addr":"104.21.66.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-18T20:55:42.845Z","timestamp":1737233742845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shazysport.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 22:15:43 GMT","end":"Wed, 16 Apr 2025 23:14:33 GMT"},"fingerprint":{"sha1":"FB:57:CA:43:81:E2:DA:83:51:07:E8:5A:4C:AC:CE:E4:25:2F:8F:A1","sha256":"E9:1C:4A:70:54:2D:12:DC:9C:6F:32:B8:92:2C:26:B3:11:AF:80:62:F6:97:7A:1E:70:ED:D8:B0:2A:1D:3E:6A"}}},"request":{"raw":"GET /livehd5.html HTTP/1.1\r\nHost: shazysport.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 17 Jan 2025 15:33:51 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r3%2FG5uQ7FCi35A39%2BGK2w2fE1ZlIbs5cg4w%2BhYMCwKGIkvyq9IAT6v5DrDnELNOijvVfLd49NzpSwJr3r3XVgZ%2BA887M2xRJ94uL0lYfrJPqnmxdoOJ9Pj42YSM9QRbOqA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cccfaffb4f4-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6021\u0026min_rtt=471\u0026rtt_var=11096\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3281\u0026recv_bytes=1253\u0026delivery_rate=6830188\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=d379bf0f24dcf601\u0026ts=79\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2049,"size_decoded":2049,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2233), with no line terminators","md5":"859102b035605eb44886d71d13d94b34","sha1":"f022ce42f90b5e178f6507073b871aa266e0f898","sha256":"2a96e5f421fe560dc675529c7ffa7b0fccbc11e33e6f8e6e52c7643f66aef072","sha512":"037de09a247fd5053d8c0792ac5207826729afad98edbf4ba35c5de80a09039ab12fe6248cf4706c49356760574fe34e9364fbc84a0124d2c0168b351ce327d8","ssdeep":"","tlshash":"0741207aae0a703c894651bc38b2e15c252bbc557ab2941135ccc608d7d0aa9c863ebd","first_seen":"2025-01-18T20:56:13.244827Z","last_seen":"2025-01-18T20:56:13.244827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":68,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naupsithizeekee.com/tag.min.js","fqdn":"naupsithizeekee.com","domain":"naupsithizeekee.com","tld":"com"},"ip":{"addr":"172.67.181.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shazysport.xyz/livehd5.html","date":"2025-01-18T20:55:43.641Z","timestamp":1737233743641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"naupsithizeekee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Dec 2024 14:01:07 GMT","end":"Mon, 03 Mar 2025 14:01:06 GMT"},"fingerprint":{"sha1":"CC:36:AF:19:73:7A:22:EB:5D:4A:58:2E:08:39:B0:1B:C6:5B:D9:16","sha256":"1E:64:CC:56:9A:B0:BE:60:5C:1A:1E:53:E8:4D:53:38:39:1B:51:7E:5B:B0:AA:1A:5F:BE:67:88:13:D0:0E:D4"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: naupsithizeekee.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shazysport.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-trace-id: 2564bdcc4d82454570b7a70e5c8180a5\r\ncache-control: max-age=86400\r\nlast-modified: Sat, 18 Jan 2025 10:57:07 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\nexpires: Sun, 19 Jan 2025 11:03:08 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 35555\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lYMje%2BL%2FFtoUVb%2BmrhhWiCdVaexh64vZIl%2FJIYgizF3cRr2zlgxi0cGUgl1QcfQOTRslIqVc1yFqG2SlQvkNvo6a%2FO6I%2Fe1zI02knC0DUoCkNGrAnyyEPhAnzJigJOW5DZ67%2B0C4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90417cd279475694-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=578\u0026min_rtt=450\u0026rtt_var=149\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3295\u0026recv_bytes=1192\u0026delivery_rate=6464285\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=22eff4cd22c1e4fc\u0026ts=123\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71744,"size_decoded":71744,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92d615111d6bc45ae50303fcf145b19b","sha1":"0c7695eb5badb5f92a37c1548760f943926dab74","sha256":"79601b2822291d6565d3bf07f60dfa9f4479af1f47bf7fdb2687b4af050155bd","sha512":"ac37085ffd99847c4409c7afbff759b7f47fff40672b90f54d5a5f2b2f247cb744d75f5e8eb5e77b0e9c11ac729acffe9171593db5e9343379dcbd473713978a","ssdeep":"1536:i+TD0uScvxYMxrvkFSEZYYen4pRRNWYzAXJDw01EbjlWhso4lj:dTD0MvxZAPen4JN34JX1E/lWhY","tlshash":"3c63f9d5b5f2b5a6029e002144bf4c594bfad911120fcb74d13a6df32674828a3bbef8","first_seen":"2025-01-18T12:00:18.644264Z","last_seen":"2025-01-20T09:05:34.287248Z","times_seen":86,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":112,"dns":4,"connect":1,"send":0,"wait":14,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"naupsithizeekee.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quest4play.xyz/blast.js","fqdn":"quest4play.xyz","domain":"quest4play.xyz","tld":"xyz"},"ip":{"addr":"172.67.160.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.036Z","timestamp":1737233744036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quest4play.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Nov 2024 14:01:14 GMT","end":"Thu, 27 Feb 2025 14:01:13 GMT"},"fingerprint":{"sha1":"76:B2:70:DA:85:6F:4F:01:00:E1:5E:F3:0D:3C:B1:E8:2D:C2:96:E1","sha256":"5B:5B:1D:88:26:AC:6B:39:AF:29:ED:2A:2B:57:E9:06:A4:8C:66:0A:34:B8:49:F7:0F:06:E0:3F:E6:C0:4B:23"}}},"request":{"raw":"GET /blast.js HTTP/1.1\r\nHost: quest4play.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Oct 2024 06:47:40 GMT\r\netag: W/\"6710b30c-13040\"\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncf-cache-status: HIT\r\nage: 5312\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RdXCvJ0qpAplDJbsuz6ARGQACH93K2VlM%2BXKk85vTJt0AmXCUuXD5hX7JMyQ6YmuPJKiT%2BqzjyDPuudZtSFdcIjQdTPKS8yd0JSiKrg0KO%2F1rEnBIQYExgyaFnWDM5WiuQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90417cd40dba5684-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6576\u0026min_rtt=1871\u0026rtt_var=4062\u0026sent=12\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=4075\u0026recv_bytes=1373\u0026delivery_rate=317328\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=aa7f36da1c425f4d\u0026ts=471\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77888,"size_decoded":77888,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"091faec928970e76d37a3601c19fcf8a","sha1":"6441e8eebe90eb8d4a40e7c25440ff99caba3520","sha256":"eb06375118b1eb73f43b8f1851472008f84999a1b27359c075bf5da6feef9a12","sha512":"0065b4e5167b85abb85d4af6be22853d1ea16e9c0d5420173f356dd7a980374487405d8561a4a5df32dd68d2956af6c7a3f099776994e2cf6a3b0eb8df1c3277","ssdeep":"1536:HnyiwA6dLK4I7T8IVCJ0Xiyu/lpvd7TN8+Prp2s:HnyiwFLzI7AeSymrpTNZrpN","tlshash":"16732ec177d5bc8212872b77731bb1e6e82a9dd87188488ef104bc90f4bda12fae4575","first_seen":"2023-03-08T14:53:38Z","last_seen":"2026-04-19T15:29:45.106059Z","times_seen":1592,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-01-18","alert":"Sinkholed","trigger":"quest4play.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/clappr@latest/dist/clappr.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.187.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://quest4play.xyz/embedlivetv.php?id=boUZqydiRl","date":"2025-01-18T20:55:44.052Z","timestamp":1737233744052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/clappr@latest/dist/clappr.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://quest4play.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Jan 2025 20:55:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 145133\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.13\r\nx-jsd-version-type: version\r\netag: W/\"80319-k2KF+cjIWnSaHvjPxNXoS36ivIk\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230067-FRA, cache-lga21958-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 12776\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wlp0qudtw3QpHTbvRuvrvJJcN8rSiB5QPjrB3jLXFQcGs5a70rG9UngddVstgWa5f44ysZjuXSvTnIvvlcVT9N0l80zHQ4Mb%2BhAY2jgdHrvYXukOqobZ2HqgKWdGxwnuayI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 90417cd41d8056bf-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":525081,"size_decoded":525081,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}