{"report_id":"a0a8c266-437c-4cf1-8018-37b189cdf951","version":0,"status":"done","tags":["suspicious"],"date":"2026-06-28T11:14:38Z","url":{"schema":"https","addr":"angrybirdsqatar.com/","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"angrybirdsqatar.com/","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"title":"Ultimate Flock Pass | Angry birds World","dom":{"size":45644,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14366), with CR, LF line terminators","md5":"ca0aa51cfca82bd1d2f058a6a5e9f9d3","sha1":"a2cfd825852873d9c0fb7d67232c993df7f5c8a5","sha256":"545b5c568ada896060d8fd52a7d96e2f32ad0dad6f99e0273b1910401fc6560b","sha512":"75a4791d3bcbfcd32fa49e64fa0b5656c1498f9bf3ecc954d00958a4865cdf028a7f77e4bfdc2865a5b8b6ce0c7da27d99030f79c7a00bf9c01fe8ad029055dd","ssdeep":"768:OQX1d98RWeLAmg4mgppgSsgKKgjugaLF0FUp:Bv9KWmAmXm+prsJKqu5","tlshash":"9023c83050520f3b7e175fe166addb2cd01aa28ac89b4a4c77fd024a2bc6fc84b75785","dom_hash":"domhashf89b1f5d76e6056b0f6beaa10fcdbde4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"angrybirdsqatar.com/","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T11:14:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-28","alert":"Detects file containing Telegram Bot API","trigger":"angrybirdsqatar.com/static/js/main.ec5a0b1b.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"angrybirdsqatar.com","ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-06-28T11:09:55.437798Z","last_seen":"2026-06-28T11:09:55.437798Z","alert_count":34,"request_count":32,"received_data":2066708,"sent_data":16703,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"rezervtemka.cc","ip":{"addr":"172.67.159.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2025-12-15T12:38:06.57368Z","last_seen":"2026-06-28T11:09:56.20996Z","alert_count":0,"request_count":1,"received_data":818,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/js/main.ec5a0b1b.js","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a78a4819bad29265d81a63c71ff1cebf","sha1":"cf842a05f12b2c91df5ddbad4944be0438f12e58","sha256":"a24ed177c50564d9d831add312619559d4e027b7574fe280a57e75b5aedc085e","sha512":"ab8ae33542e0079e91a95188fe5eae11cbc544c7bf14d784f8dd8cb00aa7ebd1b582a39812f75f133c819eb92cab5c90aca86cac6783a8c6d20465b13afe8c14","ssdeep":"6144:oWWLUwXGWktCV//khLhOVugwCg7Tzd8FTHaIKXZO1dN:kUGV//2oug2X4","tlshash":"c9845d987155be697fb711f2006f4509f33d2a0ee80dc870f198fc8966a85496277fac","size":405884,"data":"","first_seen":"2026-06-28T11:10:01.913516Z","last_seen":"2026-06-28T11:14:40.476638Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-28","alert":"Detects file containing Telegram Bot API","trigger":"angrybirdsqatar.com/static/js/main.ec5a0b1b.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Generated new UUID:3159938431656695","filename":"https://angrybirdsqatar.com/static/js/main.ec5a0b1b.js","line_number":2,"column_number":401209},{"level":"log","text":"Connected to WebSocket server","filename":"https://angrybirdsqatar.com/static/js/main.ec5a0b1b.js","line_number":2,"column_number":401311}]},"http":[{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/3.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.754Z","timestamp":1782645254754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/3.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:34 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c02-af60\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdesGXEhwQ2XTsLzVhRX2cpqR2GvlvMxdqk9OnlgXvq5%2Fs0S1x5bODU9%2Fq8tvpGqCLo2rDPM4rSzavAkPpRs9HP0Aa8d0aZz%2Fcw%2Fy1DzydgxKiLLPTpYkgrZiY7X20CMumGyz8D7\"}]}\r\ncontent-length: 44896\r\ncf-ray: a12c444a3f7a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44896,"size_decoded":45599,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"642a2cf8a8929ff7d9c48a78f4e66b9b","sha1":"5f8b5aa28a8ca1a8758a3c784902e6bccacf4610","sha256":"5d7962b713b93faa0665f05adf854abea881f75a35a7a7f9b6b681b30fdc69d7","sha512":"b6411958d504ecdbaa04e7d29f7a0b64a6357419839165cf47f48c3ed6dcc662342c10e234f5b06e679d603c9ae2ab26f794414f744e2716d44f8ed74bcca3ca","ssdeep":"768:I+jdaOH0qVfKUIrGkQrytnpglceNGpQ9IlhbdjzS/rwulLgy/CCDy76/fPx:IsdLH0qBKUIlQenqUYIl7C/rwfyd+6nP","tlshash":"6813016c2a19682edca7dd61d0ebce9a3609f345930ed858d2b35c1bd018fc681d7c66","first_seen":"2026-06-28T11:10:01.877847Z","last_seen":"2026-06-28T11:14:40.467302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/5%20(2).webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.767Z","timestamp":1782645254767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/5%20(2).webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c03-64d4\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWJ1UQsDPcIzBlQaXNvUfhO2Fk7wL2x12jvam6cx%2F2EtjFSK7e1LjzOY%2FJxyBwqGte45SGLwaofDyDOhSuXbb5P9pLVywTUwfUmoYbN%2FVosv67DxLIdnxRq7FwoIHAJjd32L5hqI\"}]}\r\ncontent-length: 25812\r\ncf-ray: a12c444a4f7f56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25812,"size_decoded":26513,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c0d4f9f96d0c4580693b6f31120ed6f","sha1":"20d3bbb65917cb47899912cd6826952f3d1220fe","sha256":"606f79d278c241127b6dbd5b38e69b3a8433f7244ae56aecd89a67b1e2abb008","sha512":"910e20d0581a58e06341ead7d5aa2811c649fae20fa317a7b6158e77bc504d130a7fb1c6630d05ae38abbaad102daa10a5c80f67638a59ba94f239badaced7fd","ssdeep":"384:VwpuAKI7evYEJulANfpgbEwKeHO9G7e76Y8/3gGiJoDFsZYpnsaW8c16:u+m8slMioVgeYRaUFsZYpns/16","tlshash":"7bc2e1d465a2a9ee025ff02f128055e5fffdef707c715956a87e8a401ae8b4001bb26c","first_seen":"2026-06-28T11:10:01.943723Z","last_seen":"2026-06-28T11:14:40.470198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/5.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.769Z","timestamp":1782645254769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/5.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c03-57fe\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucOjDV1YGQrayHr6ar1VwQbUQFv2NBoxNt1BG4TzKIZ%2BsK8XK1ZC5IgKDEb0J%2BIJg1r38KrqtvYiDSSBsn748a8S15dM9ibVpvgT1SR5aIuWGaGCtytIwUPrtU%2FnHZ9dZmB0QBSt\"}]}\r\ncontent-length: 22526\r\ncf-ray: a12c444a5f8056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22526,"size_decoded":23227,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"137d9d1f9cc58710b98558d1986365c9","sha1":"1f899d4c8c68b6e68573f0e3eae6658be70bb02e","sha256":"cb0fbc9986ba2d2c8f5d08a9c8fb7abf3f670942dabdbf8925237737aae848fc","sha512":"c03deb45f9144fa13c0a9e135edfb0a43442506472f01da9c4d2ff9e6177c9f9c2e2b70e782d107a1d225afbae7f500927f30df872b0c1d11474d85de529c1d3","ssdeep":"384:xMFsHeYWJbHqdz3oaoLDw3w1d6bAwABomybnbGkRi4Z/EOL9wl1MF6oeW1G6jMDp:xJ+ZZqdzoa6cIkEInSkRlZcc9wkhxwv7","tlshash":"56a2e1682287ae0e4d4cba4d6b9023cc346e32a1799aa7d5f5c046b68db11743470e7d","first_seen":"2026-06-28T11:10:01.936409Z","last_seen":"2026-06-28T11:14:40.473501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/js/main.ec5a0b1b.js","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.584Z","timestamp":1782645254584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /static/js/main.ec5a0b1b.js HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 23 Jun 2026 11:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c06-6317c\"\r\nexpires: Sun, 28 Jun 2026 23:09:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7d2EKStfDpY52Zmeu2AyE00g8SPOXyWmRyMMM3r7X75UuLOJfIqEdpMn7jKZxBNnWc8UUQTv7u2WvW9KO0klcO2sO%2BCEs2EBy9CLPqri6o8khH1Gi4o6%2BUmlDKtaIerD%2BXk4PLlP\"}]}\r\ncf-ray: a12c44492f6d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":405884,"size_decoded":130787,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"a78a4819bad29265d81a63c71ff1cebf","sha1":"cf842a05f12b2c91df5ddbad4944be0438f12e58","sha256":"a24ed177c50564d9d831add312619559d4e027b7574fe280a57e75b5aedc085e","sha512":"ab8ae33542e0079e91a95188fe5eae11cbc544c7bf14d784f8dd8cb00aa7ebd1b582a39812f75f133c819eb92cab5c90aca86cac6783a8c6d20465b13afe8c14","ssdeep":"6144:oWWLUwXGWktCV//khLhOVugwCg7Tzd8FTHaIKXZO1dN:kUGV//2oug2X4","tlshash":"c9845d987155be697fb711f2006f4509f33d2a0ee80dc870f198fc8966a85496277fac","first_seen":"2026-06-28T11:10:01.913516Z","last_seen":"2026-06-28T11:14:40.476638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-28","alert":"Detects file containing Telegram Bot API","trigger":"angrybirdsqatar.com/static/js/main.ec5a0b1b.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/familycard1.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.757Z","timestamp":1782645254757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/familycard1.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c04-75b4\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDhm9LvEoK8l%2BY65PHAhZ1%2FXcf8G936xMEB4pz85AXBsOAAMm98W6umjf97XARJMidv2Pn9F3YFplgfRd8iNmWT2T5QAs88I6v%2FiAG85L%2BrmeVztQGvihdTQJv3tI7a59RdM%2BpK5\"}]}\r\ncontent-length: 30132\r\ncf-ray: a12c444a4f7b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30132,"size_decoded":30837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5687e5d35b9bcc815de9f8307cfb095f","sha1":"1b5c0417f432be63bc98c0cde88bc109cb78d7dd","sha256":"9fdcd7ba1a487469e72725970232a932b22b1c799234ca468c327baa8adfb477","sha512":"3e762bc413d8ba9023c021c5d08103d513099da0db14cab67ff31e0a4d83cc29d138c01e55f74f217539c0eb901d394fd6caaa5c5eb15f693f2402dbefda1533","ssdeep":"768:SA7Bx5EMQS9CwANrCu/hRqwFT5zUm1OtUiWS3gQ0wkfthc9olcM2:b7BOhwANWuJRXFNYm1O8S3gQ0wWthEJ","tlshash":"27d2f13bbf78e6d9088858fd647a6e081947ab7c1b307f8938dc3e8396545d3140a3e2","first_seen":"2026-06-28T11:10:01.933917Z","last_seen":"2026-06-28T11:14:40.479118Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/SD-logo-copy.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.786Z","timestamp":1782645254786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/SD-logo-copy.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:37 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c05-84fc\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsBp2z4cOEbaeDIHVH4aljhZTc3Dcsi%2FQ0KyHzANpAKkwzlYgxrhfaAsmaNhalM%2FUPM5dbxOoRual0UUMm9fH%2Bb%2BYnBsQm2XnMb2YPGKdQAG7wvmv82Zue2wlwkCHg3GnlNWIVd6\"}]}\r\ncontent-length: 34044\r\ncf-ray: a12c444a6f8756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34044,"size_decoded":34747,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11505a86d61ab9ada38ba0b468be300d","sha1":"7faa5bdcdcdce7e5205237cb86726dae8e40263c","sha256":"1ad0394949c00c57a3d006aeeff0cb1375cdd4b66e4b6f1dbe184f20a7620441","sha512":"625809ffe8e9c5a09d5c58da1760451eeee2bd6e9a4625c1ba430ebb3d05cad9a3f66223cbdddb50d774db1f54ba6faacab498315d5451695f129e5306562ec4","ssdeep":"384:xVrG3uwYWJHnQLlCMii1CTMehWy4hXMNVL+jX7Uf2yY7gXHVuM8qPPegnaV7ZxkL:xk3jYWJHylfnMfwUf2Y3ZeeaV3fR","tlshash":"2be2f1ee0d69586379f252b9d3223af0b043b0d87bd9498640efc02bb5d21631d967ad","first_seen":"2025-11-25T02:17:16.518323Z","last_seen":"2026-06-28T11:14:40.482025Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/Bonus-1.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.763Z","timestamp":1782645254763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/Bonus-1.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c03-179c\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGN9uVrLGCCmJyCpFAZcTGBBbyTrsgyAyXlCQjEX41II8skh8W5OVttCEjMFhmPidkTIi0H1%2BJJIKFhUOQcnVR0nc5aDqw2MYXzTMKYzFc%2BuNbDCoF5mEr%2BmULnyE%2BUfVO3D4xmd\"}]}\r\ncf-ray: a12c444a4f7d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6044,"size_decoded":6820,"mime_type":"image/png","magic":"PNG image data, 96 x 93, 8-bit/color RGBA, non-interlaced","md5":"94a7e305df4ddfc75235eae20c05b254","sha1":"afdb7c095a56580a7c5bb1ff84e9b852efa37e42","sha256":"7788b31567c488b85fbad5d53b347dd3825102ba7cd71f9b248a54ceef7e8257","sha512":"6b53ee717e65241c53fef7a2c371a5e550a182f0946c705fe1074b70e058fcbb8b0e4d5a3193e1f090f4a75f1f52a2a79db365799d42ad8212b78aaf97f9ca93","ssdeep":"96:SSb2pP/WJqVZLfgFd7gfxoo5Z2y/XBvVieTz5z5NL/yI306jYjI8lciTzOrB:SSb2x/OqVBihoHpvVieTtNII3IlaB","tlshash":"a1c18d4518a8cd65470af62f81dfe106793b0ea91f726d2ab1300db5f4a5540edf2783","first_seen":"2026-06-28T11:10:01.880457Z","last_seen":"2026-06-28T11:14:40.484299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/6.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.771Z","timestamp":1782645254771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/6.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c03-1e0d3\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdJszBcs8O3yOduGrzXhdJs4g4vte0mfk%2B17r2ulD%2BZ4ZeQjc7oSeBTXuxMamnIwYxsnzlAN13FY7pWsKcMIAQkXj0oS8r7RsNmxIW5c5sCnKDdsNliVVEcg2xg9yv%2BFTYVqEj7T\"}]}\r\ncf-ray: a12c444a5f8156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123091,"size_decoded":123814,"mime_type":"image/png","magic":"PNG image data, 363 x 362, 8-bit/color RGBA, non-interlaced","md5":"c7ef993695606aa5f06c10c649eff64d","sha1":"d438f52e4d8a796c9c6ce568ca25d6bfc39309aa","sha256":"244ef341bd7fe27a923dbe5152a7b12b2483113124301d5befd913ccf2d6b11f","sha512":"fe9c10182a2ec7807b5bd4c02175ffdf2b6a6b6336fb52a003d809d0b9c57c1f0afeb3a0f7e003de673b72c8516fb29d43ef4d8ba37e16f13b450a0d8b793d60","ssdeep":"3072:pGMGlW6dxGzC1ru19yWGggyAUvxXX5DJ2pAvI/MI6t:Enru19lpJBHRER/MLt","tlshash":"23c312b504aab537fde90e53c0b6a7ab2e23e4f899cdd1c14d609f4589941cb4d293cc","first_seen":"2026-06-28T11:10:01.88328Z","last_seen":"2026-06-28T11:14:40.489718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/logo-en-white.svg","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.877Z","timestamp":1782645254877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /logo-en-white.svg HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Jun 2026 11:20:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c02-2119\"\r\ncontent-encoding: gzip\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xSC9Z4mHFr1XfIeUidjbISAL1tWWnh5YBXm0VUNkGxF8pDoquhMYoRXd%2BZ8NZPemtpMs7dp3lW4Rng%2B%2Bj4Oj%2FXfkDdwop0alq9gWniwXuunC4Wl33v8b0qQ%2BgF7cg0HEg0ocT7HN\"}]}\r\ncf-ray: a12c444aff9156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8473,"size_decoded":4194,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da4717383163f1f09aebd4fd7b61a070","sha1":"ce06e744f23fcdd36f967bc140999c1ce492cbfc","sha256":"cd24139625367c9132a746e3cd58b21847287473ca261a1a08b130695c77ea25","sha512":"89e72f9c4cd9b6f7e3713490202095d03245a389ecd27c2ceeea353afab5abfd19aedb8e7d87264b581b488a45661e70de8fe52c16da01ee281364d5dd5426df","ssdeep":"192:j+s6stBEgIG01nraGDJtdGljBbcnFLTkLVRt8UFeL7:jtthcrRDJtdGl2/u8UFU","tlshash":"6a02665b0309cba9fea9446ce460144cbad8d9d7d4b0f1d0bb6b1802e4ac8f5b65c7bd","first_seen":"2025-11-25T02:17:16.600104Z","last_seen":"2026-06-28T11:14:40.492303Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T11:14:10.181Z","timestamp":1782645250181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\nlast-modified: Tue, 23 Jun 2026 11:20:40 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B01HKN7zBmxHuHjeIk7QioaYIdo4SFVRVhsd7L%2FTlZG7YbtwL6iQsPRUBhVr3a2ExOG7h7%2BG2eqzE6w995evTF%2FdSmXRE0H%2FgXRGxc%2BTAdzaPiCKO%2BgONmSIQsMYQUOMgiNq5UPy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a12c4446df6956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":1035,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (680), with no line terminators","md5":"e3cc5f03aa1c69a875931f81b929f650","sha1":"3f1fecb6e5395049bd13f96d462323fd71d9ec6e","sha256":"7ac809670d529e5ec3da687533f34a5fa7d6f5383d73f0adda00c4632388aa97","sha512":"06478759daef5c5531bdc7efe91f9d33a0594ca0a0ec013cf2c4b4345a098cfb3eeb1b1ca7d828ee3e25622aef5a649d74362ef5369af6e3c1089f8acfceebfa","ssdeep":"","tlshash":"b4019e43cc10c48d577053bbbe73b07cc94ab81c9b92bc60789618aa49d4ba3c9a6e51","first_seen":"2026-06-28T11:10:01.886419Z","last_seen":"2026-06-28T11:14:40.493724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4100,"timings":{"blocked":-1,"dns":4011,"connect":20,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/7.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.773Z","timestamp":1782645254773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/7.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c03-7130\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2F56JjGMJ0aouoPoRTFXY7MDdqD0iQai2N%2FUIVyO4Nu4v6ZdPQLa1FismaAGakZfN9VX3NEyPbp7itjAeypdPFzq1Ar6H62zTqV2RpnBn3a5C%2B8t76EHSC4L3X3WYTLC7eyWEvrT\"}]}\r\ncontent-length: 28976\r\ncf-ray: a12c444a5f8256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28976,"size_decoded":29677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20a66326f23eca80b8a56322b3a695bf","sha1":"8eee9542c5567be296d732c6495a4f3582422647","sha256":"d3b84a086211d5943c490cdd84b12fbfdd066258d69323c6d7358ff47507313b","sha512":"5be9d9d9fd95f26d18fa417666fb05988200b5987aff0b25f6b735247697fc7d8b22fab82bedfc4c6d7e1bc9240c152d382dcb68aa43736ac7722dab3ed60c04","ssdeep":"768:iwiNUtwRAVaF4JBVUOaRtCxLy7nvOVXT4pSLFbQ5Ww9:LiNEwRAaOOcsmBT4pSLFk1","tlshash":"5dd2f164b24198069bef2ac92439b1f07c0c8b756fa09d1d1b83ee59523ebb395290dc","first_seen":"2026-06-28T11:10:01.952517Z","last_seen":"2026-06-28T11:14:40.49605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/r3-Photoroom.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.783Z","timestamp":1782645254783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/r3-Photoroom.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c05-26c88\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzMh0LgjoOycS9Y%2BZl%2Bg7oxM6fJyvhV9c7zRAirVHCQf959nuBoBnk9t6SuTwynYVYqAu%2FQLZJpvJGdlIxMkPzkGG1sbQx6KZAY9bLBz12jsOPJMKS15iN3RtpNwZNsTlZZssndK\"}]}\r\ncf-ray: a12c444a6f8656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158856,"size_decoded":141824,"mime_type":"image/png","magic":"PNG image data, 1919 x 832, 8-bit/color RGBA, non-interlaced","md5":"89de58ef08610003c7ce52eb5e7d7eb8","sha1":"4478c8bac130d664fb53ee0ac78e6caadc1d21ee","sha256":"ca8c743b84c4cca5e47c24a69474647a766e256dd876db8f4fd85542ba861010","sha512":"e07ed0b2bc3bfbe55e8fb2d6f562738969674ff4c7cf78d6b33cf728f93bd76aab214ee065ab1df18c3601b372f8cfa14e00963f998cb35feda084f4bf2621c2","ssdeep":"3072:eCrUxQEhQcyEa5sRZq+jHuFnMRSSQq7HZ/zFpev9m1TAE8:FxEhQt35sRZvOFnl815pMMTe","tlshash":"dbf38b17c7a56833b96b881d39d10a4328124c3776a6ce259edb308fb38bfb05c76d59","first_seen":"2026-06-28T11:10:01.90815Z","last_seen":"2026-06-28T11:14:40.498659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/1.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.741Z","timestamp":1782645254741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/1.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:34 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c02-c0ee\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2BGfrg6Ux6yQ3kTEKThwM95fvaT71I%2BkG9VjbCBqckoLBgYgGH%2BTUIrZlTYiMKBfu596pPo6lqudbTCBgIYwdegV2R%2FbN9%2BA0Ebzwste5BIJGKZtgG%2BpBxi6K99salTN%2Fk5Zfeu3\"}]}\r\ncontent-length: 49390\r\ncf-ray: a12c444a2f7556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49390,"size_decoded":50099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d231848f176a72de65b389cedeb36c9","sha1":"e27f96f0edc54e29850ab27c98c23c62052556fb","sha256":"218a7affe52302a1683683bf88cf022980a4e2fe6313dca2b329ad2bd31ec311","sha512":"c1fd01b10523790d95df771b7a918f2c35650854c98dd8201e63e4b8399918f91d2ac7dccee8fe92baa6de0e03997e99a63556737013fc4b5e1575b6357eea9b","ssdeep":"768:sTP4ubd20ShowL/b3Hym3OhTRQW6nK9XpA/EiM094ug1sFlgiho0ByPD:WPfedDbmQWUK9Xp4Xlg1sFdK0MPD","tlshash":"082301ac5709a6cc6f36342f8104f1512bade0a4bdac3079d3e844bfb9584ab1db152d","first_seen":"2026-06-28T11:10:01.872159Z","last_seen":"2026-06-28T11:14:40.500943Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/kidscard1.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.744Z","timestamp":1782645254744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/kidscard1.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c04-68f0\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdiYckad6Aj1NJVwJ5jVk58MnjFqLrBNd4CUEoW4a%2F%2BsSi3ry1o4O%2FBNRI9sK2LiurUbKmQRmwAcf0HffK2jlsP1ccy6GX4VYqnbeUPh67%2B%2BdaUAyXTDxLW833Vcsfxjur5lQus9\"}]}\r\ncontent-length: 26864\r\ncf-ray: a12c444a2f7656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26864,"size_decoded":27569,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b73f1ecbcfae03dc4aabd080770c37e7","sha1":"875ea3e540d59dee2518130216b9bc12692259f7","sha256":"4e03c508f244c7b84e7017e992598c56ef88c35a32eb3a725a8d62835e8bebb3","sha512":"459a2521aac8df53a49a6258fb8e8cfbd2ec88bde7750b7a6e9e89352bc7a6555e3ce5b3e88337af4be529ce6344a23436857181713c35675dc689bec9a11e2b","ssdeep":"768:oujuZ6DFnGmGduuw9F9eTaJrpjTf1nOcJEEAHYcVl:9q6DJSuuY11jjkv5HY8l","tlshash":"53c2e1838582dea8ce68c4c6d17ff912ac9c065640e57d92377ff706743c1eb6466a0e","first_seen":"2026-06-28T11:10:01.889182Z","last_seen":"2026-06-28T11:14:40.503691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/r1.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.748Z","timestamp":1782645254748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/r1.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c05-1a526\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAGGCwOgruRmWg15aSKZgJ598woySSfZFakLQDEYEaDmDWxfLIK3xXEhulc%2Fo8fsgFqreIAG8jIrnOaycZH%2BU4u0E52xAPXUUrt7S6Cpj%2BjfVioM5cbLuDo23LeK4paIL80qkb8%2F\"}]}\r\ncf-ray: a12c444a3f7756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107814,"size_decoded":107087,"mime_type":"image/png","magic":"PNG image data, 1258 x 263, 8-bit/color RGBA, non-interlaced","md5":"ddc5353dd75e6c913b09630a85a22c59","sha1":"1bd78f6fee90375d37a1bec9b4598319268e7f35","sha256":"6317a43e7080e4a8e3a0b3f6bece25015974a64f0dd1412bf3ca0ada78e74d35","sha512":"46bf7c41b56880475c5bcfa8e548a632fe452bf7528eb9809cce9c69d85053faf6268bf0bf2125c53ad8a6d6e0cd98da6e3aca76e408bfa715a58b98d302af08","ssdeep":"3072:6ZVW28OuseXeEPHyD++uIB0JuhxYDQdjDZRC:2VWBsmeeHyGf+YDQdRRC","tlshash":"d7b3015cdcf08eaa2eedd13750064776abb1059354e29afc69e0b9934c844bc434cebb","first_seen":"2026-06-28T11:10:01.905557Z","last_seen":"2026-06-28T11:14:40.505773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/adultcard1.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.752Z","timestamp":1782645254752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/adultcard1.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c03-5fcc\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp3dWo5m7lssDfXsTfstsiYYB0us0wK0bUDsFcFehazP7OA8VxVz7RVbLsbxUEH19cjUsDSn2%2Bb90EEOhAD9J09ROaxJPf2HmhQt3hGHg%2FfWiUL7oZGiYclIro0Giea6CPpBF%2BnV\"}]}\r\ncontent-length: 24524\r\ncf-ray: a12c444a3f7956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24524,"size_decoded":25225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11e5ab76ac02c6008ff2da89c4d2b091","sha1":"27a05ee728f270aea57047f3fec9a635e64b41c9","sha256":"e36e7a5998bdc8e6578adf33151d7b7f86d5dd0fee3d77aa00604fd11e8c9758","sha512":"a343503e976adad1c36be5c351897257a74d5d76582f26ae20fb922350e9e5cf9384a801f9db09ae8e92b609aa3e7436fcc50273d1cab87a9c8e56090be98dd0","ssdeep":"384:zJDetYg+rEC4xrl1N59HdYxadnRcRARw7slT4Fmiy1b8xjfWRlqhLszvLF8Cfyx2:zxrLAlP5RdEQnRcS2vPVfn6FJYgz","tlshash":"34b2e12c291e5887d12d2f97d8f4673c789aa144cc9b4d0b2c191fd91856ddca3da84f","first_seen":"2026-06-28T11:10:01.927866Z","last_seen":"2026-06-28T11:14:40.507783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/r2.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.765Z","timestamp":1782645254765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/r2.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c05-5dd7\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwLlCDvVErUuNnUQTmeWuL%2Fx8pmJgVe0wZNiGkOq6F03bzpWjPb0gzMufiYXme5XvY8SIQs2qG9wCgWUcHU9Ipv%2F0pN%2Fnrmb1LpNrPby59bykmr61I%2BFVQ%2BgdfiGetgZiu8k5p5U\"}]}\r\ncf-ray: a12c444a4f7e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24023,"size_decoded":24684,"mime_type":"image/png","magic":"PNG image data, 476 x 106, 8-bit/color RGBA, non-interlaced","md5":"512245177ec701a124749179cdacf5b2","sha1":"7db1dc54fd24799d7ac54d6881a9d82ce2742f79","sha256":"d9e7b248f765cc0097a3ed7ca4819a20bceef420f216920dd7122cad8e78d219","sha512":"c13987f691eeb4afe0c1a6ac922e271adb1c5320f11e285608ca7a95db732516d77bb05dd6aa61b9faf1ebc0af732b35e9976ca315ac7be5776412e63dcd3900","ssdeep":"384:2r3+wF4uhKSYL8REl4h8SSLmK7l0WhXQMFMPdmZml+vYOap8wCczloa:LMZHSLmQ+o/Cp4vYpCcJoa","tlshash":"35b2e1cecd658d4a0da5080eb29528f56ece1b2b48839f7bd18cf82bd2a82456636754","first_seen":"2026-06-28T11:10:01.941842Z","last_seen":"2026-06-28T11:14:40.509585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/image-642.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.787Z","timestamp":1782645254787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/image-642.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c04-5978\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEVuCRrXL%2B1lXnTimz3FVgC4UL8Uh9xbr7K58IarWtQtq7pjiReV6LopVemL2yuyDQd3kgnoNGr66ZjKlrenRnvXKUrtch6lkSY98wur%2FGJG3DKNKyXSGVcjnGkIvx2PS%2BrJtjfX\"}]}\r\ncf-ray: a12c444a6f8856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22904,"size_decoded":22014,"mime_type":"image/png","magic":"PNG image data, 815 x 473, 8-bit/color RGBA, non-interlaced","md5":"fbb0ed4e6c496a1d9a44427dbcaec37d","sha1":"dbb87076696e4aedcd940d5be0d744aaea873d88","sha256":"9980e78f16b9e76c69052b28a68e585cd88e6760409fea08d04613cba2d31aaa","sha512":"ed1f7d49d36448ba75a29665ade98f8c94fa5941170d4cebd582888b00190ed691c9307218e01b6931b512edbd9f75cf20abc6e6316a5758d8a36d02170f1d51","ssdeep":"384:e8WMzXxbjsiqGrP+QlofB2SNhT6aWo8JK0qgcG+T7NUKDiTwNimbnzi3eK7e:cMzXxbQiqkvucSzGLo8ERGY3WTmi+23a","tlshash":"4ba2d0e04ca2589bd8f063b47f6a5697750590ab7580f6dbc089f455eb3b2fc2f06183","first_seen":"2026-06-28T11:10:01.949933Z","last_seen":"2026-06-28T11:14:40.511527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/media/abflockposter-webfont.1cc606f73c20e8410610.woff","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.848Z","timestamp":1782645254848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /static/media/abflockposter-webfont.1cc606f73c20e8410610.woff HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/static/css/main.6f302bcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:39 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3a6c07-5cb0\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzCTwgrcV763hOlYi3hnuQTcnJM2u7Xh0TuYHrj8ujHdfy5iE8PNE0WC0AUtXE%2FrRt0DwXX%2BI1AxhkoP0pyUVeGa%2FouWAGBJLAOQYXA%2B5gJ%2FTbuPUgcGFcPpd%2BWwL3Q8cP%2BKonPa\"}]}\r\ncontent-length: 23728\r\ncf-ray: a12c444acf8d56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23728,"size_decoded":24439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 23728, version 1.0","md5":"d9a53c66c75377e290a81efc2402c43b","sha1":"c0c99bf9b691c4e1e7c5574bc24f017846f4df03","sha256":"02d7ab7373d3947b071ec828753f63d3654fc9ea6f4cd452f5516b646554b922","sha512":"9a1ee792786eaccba4b45786ac0114dc205acf2ea450920864ce2c470fb35116e8728c668319bf762b93feebe0eb73b25c230accaf0192b087d567dd029fcfca","ssdeep":"384:yYffD2XSHLlyMqf3gYaCCARNkKnjWtytZrsWqy+TBXAoPfpLEs583Im2z7HaSI:yDXSHL/qoYcfo/DIWqzTB1PfNEh3OHal","tlshash":"abb2d12c492624cfc6a9a7fb2171b3b17c7504685a6f726493c8c56b340b5af4f1cb32","first_seen":"2025-11-25T02:17:16.611075Z","last_seen":"2026-06-28T11:14:40.513396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/media/FSSilasSans-Regular.6975b4aa74f1bdb63790.woff","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.851Z","timestamp":1782645254851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /static/media/FSSilasSans-Regular.6975b4aa74f1bdb63790.woff HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/static/css/main.6f302bcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:39 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3a6c07-9590\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uC%2FN1qJ5ljUR69a%2FNni8CyihDXqTFpFUNn%2F1B1ZIGRH3XV%2Ff9QMqZ4EO6NwheOGbzbHG2lOI97fDnDHGrSe9kR4XshP9aeEpOdL31K111vfan3XEuTaMb94bkn%2BP8Cz%2FmPsCycIw\"}]}\r\ncontent-length: 38288\r\ncf-ray: a12c444adf8e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38288,"size_decoded":38997,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 38288, version 1.1","md5":"8f6037738469c98db53099ecc1c09d46","sha1":"ab77af8a4c044a1f9e1c62d78eee959474e8b2c9","sha256":"7d55e65d4ed266360ec4405733ea7d30f695ca2a29011b30f44fc3650da973e6","sha512":"a5341758130de1dfcd0e3415a770333e059046b8d03c07e2529d21a5058244d4e1a5d1b68c7efc9b7b8ac82265d9df09591b0ed453121737f050b50f5202373a","ssdeep":"768:gfnfHJSsa2zdpvsc//4TnhMV61iAOINoG5gWzvxKi:gfnYsbvscHknhqQiA5oagWz5Ki","tlshash":"f703e109fadef1d6ccb30a3611c71a34572902f7cd726a4111a4a5fa2eb1e80c79d67e","first_seen":"2025-11-25T02:17:16.681873Z","last_seen":"2026-06-28T11:14:40.514366Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/Store-download-button-1.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.791Z","timestamp":1782645254791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/Store-download-button-1.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c05-6f9\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLrIP5PWD%2BDF276PZ11204f6H2gluKaKUKcB6b4MFjPTeY8io26dNEJEsOBptYbDViyeh1HeaUNxJRVhpXtUym9uyyDRRt4rV13fKuIb%2FAJSn%2FUv3%2B7UHqEzws5FZlXRZtknJJk7\"}]}\r\ncf-ray: a12c444a7f8b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1785,"size_decoded":2560,"mime_type":"image/png","magic":"PNG image data, 120 x 40, 8-bit/color RGBA, non-interlaced","md5":"55f94e115bb8932fdbd62cda27dc1a7c","sha1":"37f4e4011a0939067368f0b754521146da6bed00","sha256":"5ea9191f74ab885e221fde1ab09bd75e4655217855c6b15580f0d37b6223d9f7","sha512":"585c085988ee3ec039df062a487927933a1d77b9d812ac7af434cffd96a585d20e019ea471a825cf04cd33abd9e752484acac20300f0f312cfcd426c9f4fa172","ssdeep":"","tlshash":"1431e9b897bde0091eeb8de1023059fc19e40abe7052791db531554b5683065832fd2e","first_seen":"2026-06-28T11:10:01.924168Z","last_seen":"2026-06-28T11:14:40.516611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/media/abflocktext-bold-webfont.7f2ecbfe005cb742fc47.woff","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.847Z","timestamp":1782645254847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /static/media/abflocktext-bold-webfont.7f2ecbfe005cb742fc47.woff HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/static/css/main.6f302bcc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:39 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3a6c07-93f0\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSH5EFpCPmVrTXBoTZQs4kET7LjR1XCqPvBhLWuYVnau9Osyp0OunY3sz6GB8E9VKCjIfzqUJ9eKoPif7x9vxsVH%2B%2BUgA107Gb4NgcAo2zlQ1n26K6H21bv1OxIjJhtoQ1eM0h%2Bx\"}]}\r\ncontent-length: 37872\r\ncf-ray: a12c444acf8c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37872,"size_decoded":38577,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37872, version 1.0","md5":"e9b40062e4053558f2662d276ebe6ee9","sha1":"fc254ff2d2dd8cca8d65208a99a7c891cfb35693","sha256":"72b7cacb05c45a4fe6af64efd62488f5262d5c77d5a425ebdebd96ca4646a401","sha512":"3c650adb25290484f3f8bc81d743e7cf9f400a8b81483de978678b9d4764697465500305a97917c85f714e7a5b5210450b77c95fc2ac0e7b72a10da6b3553b2d","ssdeep":"768:wafLf+e/grBBQpXuxWkXkZEOIHTGoHCfiJTXmr1fQ3ml4s9mt:bz/IropXuQkXkZEOIzGmCK9w6q394","tlshash":"9e03e1748c25f661e37481b19a4cc0a7e6b0031e1af522960db4eb2f55a6903de0fb3b","first_seen":"2025-11-25T02:17:16.433261Z","last_seen":"2026-06-28T11:14:40.518397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/2.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.750Z","timestamp":1782645254750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/2.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:34 GMT\r\npriority: u=5,i\r\netag: \"6a3a6c02-86f2\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxaFOHhpaLAIiM3SIMtDwbbg1AK3sJTkL4Ov0ATOXYMknZN8wGcmUYlVRxpfBl3EaHB6u7S2jJ4OzY3OderMNU0ClShI8D5Jq0hM2dpbEFZ6phUQpNKqKKdKmpI4TxYmv1ar6QWz\"}]}\r\ncontent-length: 34546\r\ncf-ray: a12c444a3f7856a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34546,"size_decoded":35241,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20973b6971b9ceff321cd8b624601e80","sha1":"fbe1acdc493751d08017dc2bb371d3320376a45c","sha256":"c678f523b4290ecf116fa1ffcaa02c1e8c8b3a900377133c3c913a3e2c330363","sha512":"92f78c4a31dd3e14a6f49cb36dff6f3c062a8cf367ba1e86849538bf0d20f44e7383adff585af33481eca39cf80ccfe1401c7997e54f5b6b78249959a26cf7df","ssdeep":"768:swbu1VPSGUTgiiW0FYNte1f0AcXoatKqwW1iEKze+M/w:sb1Vq3iWY6t1SXqwZMI","tlshash":"4ff2f2ef073d26fa790b47e76cf1b4a3d71c5e1841871a1b11571e9f0af8a521aa223c","first_seen":"2026-06-28T11:10:01.875103Z","last_seen":"2026-06-28T11:14:40.519265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/4.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.759Z","timestamp":1782645254759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/4.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c03-35223\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLKqJrOyxJJToV1TmSCvuFAr%2FvL%2Bb3LYMAl6jm2GSbOCgfqqWHirBdq5c7Om2yVCgkCHYpkViINuIbaRzW7skpcRr9Fl4%2BUvjAtLkoCHruA2r9yA5%2FvRNd5Au0pvrtarlztCGZh%2B\"}]}\r\ncf-ray: a12c444a4f7c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217635,"size_decoded":218447,"mime_type":"image/png","magic":"PNG image data, 386 x 413, 8-bit/color RGBA, non-interlaced","md5":"57cfe2fff7dac0aced05a4bd8b313ec9","sha1":"9895ec5ab96615c0c87f6ec423b9c87180ad85d4","sha256":"df7f34537362cbf43c4b18af8333582e8985d76f4c3b76c610d39798a2039698","sha512":"d01af9aebc7a1da032c29a2803e069cc179d90f665e3cc949bfa37c0c09b48b6ddc062cbdac5f125ba280eb979cabac5e2edb5ed1bc508900f1338861b2b690f","ssdeep":"3072:+Tn8y6X5p7I1xwNEy6RKsEZiLUViJbDNH0kDIv8BaiF9YUmJIqITH28ETmjLrvQ0:2n8ywy2Ey6RBMKUQbJU4TYUzJETv7ve","tlshash":"a42423b967ca8ba5cc1df7ff126c9dd29748979d3b885460a07cad2103b11a3cd2b5e0","first_seen":"2026-06-28T11:10:01.918834Z","last_seen":"2026-06-28T11:14:40.520684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/i.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.781Z","timestamp":1782645254781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/i.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c04-526de\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxWTY3rGX%2BuZRmEUOQnlJbPHYqT0rG0qQSpJcXlgSBzxS5Sg8qs%2FgOIIbm%2BV66AmpsjOe2O%2FCITfMxEXijfkXAO6jMg6zgVPT1gdSif%2FNS1I%2BueGBIwz0gBPrMP43UcLs6dA6EK9\"}]}\r\ncf-ray: a12c444a6f8456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337630,"size_decoded":317854,"mime_type":"image/png","magic":"PNG image data, 1919 x 795, 8-bit/color RGBA, non-interlaced","md5":"2d98221b2c361dbb7b3dd80d1b461dc0","sha1":"264378bbfda85c9ff5ca0cffbde6e3f7a75d157c","sha256":"8328db328342464f4cb277dd003452309c0a34eb36b55ee3cb44e2cad3776c88","sha512":"1e257b8f81cf2f572290ec714c66b9b78730b9b8138edc6ec6a4b1119e14013ffead873c4319dd6f181da4fda12a3a25a30eb41901d542442164c93af91ebc89","ssdeep":"6144:HdIZ/CzB63OgqBNigti1v5FS/QMq2wchGAf7F7V3xcgL0AtfzlDjAa3QPYXpOy:HdIUF63E5ti17f2wcEADJVP0Atfz6aAq","tlshash":"cb74e0a7ce50353fa222221993877482d57128a37250ef9f1f9630bf9e97ba0ed34c54","first_seen":"2026-06-28T11:10:01.910925Z","last_seen":"2026-06-28T11:14:40.522399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/Asset-1@4x.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.788Z","timestamp":1782645254788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/Asset-1@4x.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c03-24a1\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9PtGU1vZxFZHvoVQhpWCBhemnm2iYlwzsALE2TbBEqKt%2FM5yRGWcErRmTHqIxUjbijwFamdJVKRnBIMI6ZG4kQyeHV4ZJbXg8JSd6ve7yPGID73VNjNs0%2B02mXOrKUtZ6wW577v\"}]}\r\ncf-ray: a12c444a7f8956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9377,"size_decoded":10027,"mime_type":"image/png","magic":"PNG image data, 730 x 171, 8-bit/color RGBA, non-interlaced","md5":"8e4b60c653e9c43acc9f33be2e5fa295","sha1":"3efd25337adea46d90ee76003f4fb185d2ef6a6a","sha256":"d80d008cd91c21f9049fe90e07842c759efc90f4bd96f19f34c818fbcce34e0c","sha512":"e93d3311ddd218c1b26148b6946729ca8c33fa85d79356df09f4b7d644b365a755c11789d7444be0eac914cb4d01ad13f6789611fb62ca5823f8e39a3410dd2b","ssdeep":"192:hx4xF8GAniaFe6EtUF5F6AWGAasawTDBXMb6gSbstGUXtoL70KCK+0xvK:z4xFdAi6qKF5xjNO8sbsttuL70KHK","tlshash":"d812bfe9965a8452dae20129d7bd0fe811933c41031aa30586fa9ff06b6fe8bf10b205","first_seen":"2025-11-25T02:17:16.510337Z","last_seen":"2026-06-28T11:14:40.524566Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/logo192.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.876Z","timestamp":1782645254876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c08-14e3\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKoeTjhGMtUbD2bAT778zcpqj8ONVtqFEbPsAj6etGOx3gXOTAji9U5j7FvPIndXuyRbXNbzAk%2BBmFEdtfyafPAgGzFrRjFNkxkwQ8ERLJfh3Uo%2FpoQobLO%2FETXjcnFRG71XY9pQ\"}]}\r\ncf-ray: a12c444aff9056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":6089,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-07-01T02:57:23.110625Z","times_seen":11090,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://rezervtemka.cc/","fqdn":"rezervtemka.cc","domain":"rezervtemka.cc","tld":"cc"},"ip":{"addr":"172.67.159.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:15.193Z","timestamp":1782645255193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rezervtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 01:02:50 GMT","end":"Thu, 27 Aug 2026 01:54:41 GMT"},"fingerprint":{"sha1":"84:1B:86:D4:E9:95:D8:3D:3E:C5:E8:58:17:7C:B9:8C:9C:44:42:7A","sha256":"CD:4A:F5:19:CA:93:0A:5B:32:16:6F:17:3D:77:D2:2F:E1:39:03:65:D2:EB:9B:ED:19:2C:73:A4:F7:5A:5A:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rezervtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://angrybirdsqatar.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VG26Dzj190Iwif3je/KLBA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 28 Jun 2026 11:14:15 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 845L3fc5be5tejmIMYB5PDZm9hw=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IpLlCN%2FBanSUjzQGhOD%2FC%2FOvaV6ixQaMujlNq%2BFOt1Q4Wh7%2BNWwZuPbmQIEMubp9HuUrDCu7ZVQdv%2FZD%2F5Snm4JeTFIjjb1500NR5HkiD9iwnrbPoxd7F1oTofRG2s04iA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a12c444d28ed0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1024\u0026min_rtt=968\u0026rtt_var=290\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3195\u0026recv_bytes=1322\u0026delivery_rate=3255652\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=377d02b759cd4af0\u0026ts=78\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-01T05:18:53.694782Z","times_seen":16880888,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":17,"connect":15,"send":0,"wait":72,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/static/css/main.6f302bcc.css","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.586Z","timestamp":1782645254586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /static/css/main.6f302bcc.css HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Jun 2026 11:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c06-b596\"\r\nexpires: Sun, 28 Jun 2026 23:09:30 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFWOVzVl%2B%2FpIxG4xONY4lUs6s1V%2BiN9ZhMI57GhKgE%2BLkN7krO%2FsU%2BcgtxFaowCZkFnVgvYdpuJZ6lCawH71XE3EvxxpFwQVM0d6nHxPB4JcG5CCEI2eOsfKevMxK%2BLwyYjHZJgH\"}]}\r\ncf-ray: a12c44493f6e56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46486,"size_decoded":10101,"mime_type":"text/css","magic":"ASCII text, with very long lines (45737)","md5":"207b5b40612a56106143b88f51745f6b","sha1":"cbd3dd9cd60a275f5180d4c06e3a1568c9081530","sha256":"a870d64783cbc92fa56041308e2894609b436eeccce3a0b91d4b03697b43e61b","sha512":"070209a68f81dddd5b4a8126c671cf20d8881c701d35f482f9002042e7152e6c9d124ef4aa7024acc0378bc9c7ca59012afd3f76d2764351257a49453fc305a7","ssdeep":"768:dFKHBGNuu3aUQ2movafEURL9aMwhwCK6ra:dFKHBGNuu3aUQ2movafVRL96c","tlshash":"552385499a10293e7c1398f2c6d8be8ce11bb5c1efab15dabdca500556c27e60fa7704","first_seen":"2026-06-28T11:10:01.916241Z","last_seen":"2026-06-28T11:14:40.526921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/8.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.780Z","timestamp":1782645254780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/8.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:35 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c03-78f6\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nchEe8V6wSViGWiwdEIIAg9nqmh%2BTDCQEAtAJV9jCBB7QNeyJiIGQgxtk22YqSM3uoSk4NxDo8%2FZAckdY%2BFquFdsa5oW7Z7W6GaC%2FUzQIYrk0r6lZFZIjoHrHlblklitBF%2B0x5r9\"}]}\r\ncontent-length: 30966\r\ncf-ray: a12c444a6f8356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30966,"size_decoded":31671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22dd82e5d08872ab9315e4c22906c22b","sha1":"1f9db51844d7048993e1b2ff2131fbb6be2ed047","sha256":"db63686741df0a3ee43d67aa63fd5a2c11c03698929c105380b3894d5a0a3db5","sha512":"46a82a91eddfc8de08b2447d6bb80cb706ab9e5acf29673199e408f6c6eb0f10defe13824df16e5291630e7e296c514baebff89996e4322efdf09f99e95c22fd","ssdeep":"768:pTYyaApeKOUhe4PP4gJnThYDil0rAGoJYlSKSCjGJGuY2:d9aAANePAoTQiKU9YI5CjGV","tlshash":"c8d2f1a2f413438abe3dcb62d76168def8c8f205900f6009ea065f179fb7ec819964d5","first_seen":"2026-06-28T11:10:01.938812Z","last_seen":"2026-06-28T11:14:40.52799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/footer-image.webp","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.784Z","timestamp":1782645254784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/footer-image.webp HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\npriority: u=4,i\r\netag: \"6a3a6c04-198ac\"\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBsj42OJLbElCVGbTzzBTxn7WRUIVGH9mCmmKw6VEyyiYC%2BLbgnKhuFKYJHhFpBmynlNWw00TS5NuFBLNIul8jqFo%2Bd7r0n%2BcFPujuN%2Bx4OeUSBkQggXcJJGD3KQq%2BMQt0QBPqt%2F\"}]}\r\ncontent-length: 104620\r\ncf-ray: a12c444a6f8556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104620,"size_decoded":105329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f431904b05f431c342ad82314eeb9e7b","sha1":"73159d540d44b2e209bac25747c12e4d43c8412c","sha256":"350113daedc78d713da2ae41a8505479f5aff043e719a42a3e32ab32ab789a8a","sha512":"07b31f77c15eaa91f049989fe067147f0159190ea9ef55a341b0611148c80502d625ccd1fd6650ce2f9226be4b2443f3d9093c0843b65c1961a1ac033620223e","ssdeep":"3072:oOKqAop7C8GdJ3cEnvSYRjK8nP+n1QAe1uqGeeg2emh:oOK6pIbcEqY5K8nPQFTqGezWh","tlshash":"b1a3120b49ea2d8dd7ec3cdc59b442e9d5aae8e77c00e02ed48cda142d992f607dcd64","first_seen":"2026-06-28T11:10:01.862453Z","last_seen":"2026-06-28T11:14:40.530145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/logo-en-white.svg","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.738Z","timestamp":1782645254738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/logo-en-white.svg HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Jun 2026 11:20:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c04-2119\"\r\ncontent-encoding: gzip\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vyv3eC6cHHDIHbNWNAyLB1KoTnOV1lOwQgktsNNFnt4AiJb3vvp3pQIbe1SgO8pp9AprsetotKbQsY2pfyQpHak7qRsk8EcihGvcifAufJ2UpT5FYdo4vZUFL%2FRjcZvIqgmyyIX\"}]}\r\ncf-ray: a12c444a2f7456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8473,"size_decoded":4183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da4717383163f1f09aebd4fd7b61a070","sha1":"ce06e744f23fcdd36f967bc140999c1ce492cbfc","sha256":"cd24139625367c9132a746e3cd58b21847287473ca261a1a08b130695c77ea25","sha512":"89e72f9c4cd9b6f7e3713490202095d03245a389ecd27c2ceeea353afab5abfd19aedb8e7d87264b581b488a45661e70de8fe52c16da01ee281364d5dd5426df","ssdeep":"192:j+s6stBEgIG01nraGDJtdGljBbcnFLTkLVRt8UFeL7:jtthcrRDJtdGl2/u8UFU","tlshash":"6a02665b0309cba9fea9446ce460144cbad8d9d7d4b0f1d0bb6b1802e4ac8f5b65c7bd","first_seen":"2025-11-25T02:17:16.600104Z","last_seen":"2026-06-28T11:14:40.492303Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"angrybirdsqatar.com/images/Store-download-button.png","fqdn":"angrybirdsqatar.com","domain":"angrybirdsqatar.com","tld":"com"},"ip":{"addr":"172.67.211.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://angrybirdsqatar.com/","date":"2026-06-28T11:14:14.790Z","timestamp":1782645254790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"angrybirdsqatar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 10:24:06 GMT","end":"Mon, 21 Sep 2026 11:21:21 GMT"},"fingerprint":{"sha1":"C2:16:88:7C:F1:F6:5C:65:00:F1:76:8E:CD:31:99:6A:E0:D9:1E:D5","sha256":"FA:35:CB:E3:5C:24:EE:3E:AB:EA:27:7D:B3:4B:0B:C1:3A:E5:7A:B0:04:DD:5B:48:5A:AB:F6:30:4E:6F:C5:3A"}}},"request":{"raw":"GET /images/Store-download-button.png HTTP/1.1\r\nHost: angrybirdsqatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://angrybirdsqatar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 11:14:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Jun 2026 11:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding\r\netag: W/\"6a3a6c06-781\"\r\nexpires: Tue, 28 Jul 2026 11:09:31 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3B8uEoEHpY42SbZSqpD72FTeF4HoFWKD7EVKMT6XFPWY4fXy8gJ2ylDmgaZu%2F1rQ6KJazsfHN2yYWn%2FxjFUStafRPT0nvkxWbvsl1Y5Tm2CFfieP3%2ByyTzGiwXhwIvIkzkvZdj2\"}]}\r\ncf-ray: a12c444a7f8a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1921,"size_decoded":2689,"mime_type":"image/png","magic":"PNG image data, 120 x 40, 8-bit/color RGBA, non-interlaced","md5":"7193741f061647444e140e99ce1ab07b","sha1":"a83eeb8df733f5d8bddc81970a6485654394e99c","sha256":"1fc649fd7f6c10a3108284c30a7ea495add03d4a741ba70cb6c58f263d6bcfac","sha512":"6fe67a290524bf5f6e7756eba255f2232b33aacea2d18aa166c0149a5a26bd72daba56e18255e975bcd62002d8ca0f95427427877a563917c8e03cf24ea21b46","ssdeep":"","tlshash":"58413d0f3b6157e22d5df1eb6077c118bdc41c560116435624dee8371a3b55928d3fd0","first_seen":"2026-06-28T11:10:01.865989Z","last_seen":"2026-06-28T11:14:40.531479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"angrybirdsqatar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}