{"report_id":"a8bf99b6-5683-438e-8508-b12c50537bf2","version":0,"status":"done","tags":[],"date":"2026-06-27T02:01:49Z","url":{"schema":"http","addr":"www.evicgame232.blogspot.com/","fqdn":"www.evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"title":"Roblox Robux","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.evicgame232.blogspot.com/","fqdn":"www.evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T02:01:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"www.evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"zr-dqb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"d15skjf5hy9xr6.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"d15skjf5hy9xr6.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.postimg.cc","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-06-25T07:56:24.282682Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1219,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.rbxcdn.com","ip":{"addr":"2.23.13.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-07-17","domain_rank":99657,"first_seen":"2013-08-19T11:03:07Z","last_seen":"2026-06-26T20:53:21.674182Z","alert_count":0,"request_count":2,"received_data":207237,"sent_data":1166,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-06-26T04:03:42.761782Z","alert_count":12,"request_count":3,"received_data":9930,"sent_data":5536,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":2,"received_data":44420,"sent_data":1145,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-06-26T03:55:12.569031Z","alert_count":0,"request_count":1,"received_data":10949,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-21T22:30:18.963204Z","alert_count":0,"request_count":3,"received_data":1284777,"sent_data":1479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.183.88.246","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-06-25T04:25:36.066833Z","alert_count":0,"request_count":1,"received_data":486,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d1cdbd1x576ga0.cloudfront.net","ip":{"addr":"3.164.247.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-04-26T06:40:27.305228Z","last_seen":"2026-06-26T20:31:52.500879Z","alert_count":0,"request_count":1,"received_data":6602,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"d1g1lhd4vferpn.cloudfront.net","ip":{"addr":"65.9.60.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-04-28T18:18:49.825714Z","last_seen":"2026-06-23T21:32:25.118278Z","alert_count":0,"request_count":1,"received_data":27799,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-06-20T16:04:28.707938Z","alert_count":4,"request_count":1,"received_data":52064,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zr-dqb.pages.dev","ip":{"addr":"172.66.44.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2024-02-15T18:25:56Z","last_seen":"2026-06-27T00:24:17.306163Z","alert_count":1,"request_count":1,"received_data":24382,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"evicgame232.blogspot.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-06-27T00:24:16.319641Z","last_seen":"2026-06-27T00:24:16.319641Z","alert_count":4,"request_count":4,"received_data":31109,"sent_data":1994,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.evicgame232.blogspot.com","ip":{"addr":"142.250.178.65","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-06-27T02:01:51.394439Z","last_seen":"2026-06-27T02:01:51.394439Z","alert_count":2,"request_count":2,"received_data":433,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":14031,"sent_data":655,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"de6jvomfbm0af.cloudfront.net","ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-04-23T15:54:20.193331Z","last_seen":"2026-06-20T09:17:03.608652Z","alert_count":1,"request_count":1,"received_data":2271,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"d15skjf5hy9xr6.cloudfront.net","ip":{"addr":"108.157.217.220","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-05-05T22:29:32Z","last_seen":"2026-06-27T00:24:17.013536Z","alert_count":2,"request_count":1,"received_data":27796,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"476030e91242e5de331503ce947f3221","sha1":"72b21e052b2ce44647fe393e11103512e13fa88e","sha256":"199bece9f569ef096d5fa8b9a5d67f78724db13ff4b1889f614886dd3a3143d2","sha512":"2d34d596c9760b395a7f8837ee04910696be2c37fba902f8f61f3b3b0019671b61695d21123e1fb3f09aa3fb2bccc12a61b879bd7dfeebe6171482ca12bfeaf2","ssdeep":"","tlshash":"a5e02b299ce706384cf67a481079da7934f878a4aaa3d067525cc86dcd39fc65c14aec","size":424,"data":"","first_seen":"2026-02-01T14:36:47.80346Z","last_seen":"2026-06-27T02:01:54.425137Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe77f54a9ac4e4194b939150157b0000","sha1":"e2f11c02c1856c06dec28f2b0929cc47e2f1258e","sha256":"7a0b590b58e8b706a138ed7bf1ae7858729f77283015970adb8dbe2e819e1ac2","sha512":"8e3bf40830c75a74d7aaf224526ea28baf2f3476c73919e8af0531bfcd9cf2c9c7d12aa58e13bb46f38ad75abff314159e9917e176e45c132a3e123a6f3daf23","ssdeep":"","tlshash":"f99002181498a270a0045606855551120251e5770e54080462729361c1514c8149a492","size":50,"data":"","first_seen":"2026-06-27T00:24:20.590428Z","last_seen":"2026-06-27T02:01:54.42591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2536df5500472e1de28034f4c07a067d","sha1":"c5fa7462aa7e964efd6dbf6e56caff6a128158c0","sha256":"b815fbb81f71ce5cdff4631273a38f936b6c85ab06cd3d045d4de7bc41dfd3d9","sha512":"5eeca9855bb1ed2ad469634d09ec143f6580e1c301f6c7695c72bafaf5b5fd0c5014cc00b5ba9f47bc229e84c63afbe1d2ae2afd4d5301d94341182494644f15","ssdeep":"","tlshash":"c0d02ef7f4d5ac218809a3200825e9083032e6feb3a04de094c0053a088a8ba9306fa0","size":271,"data":"","first_seen":"2026-05-25T18:38:39.672755Z","last_seen":"2026-07-17T20:57:51.663226Z","times_seen":7593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27a2b2fc594daf6ecad1257063bb7174","sha1":"32f4da7049292636a70d20cb17030d2fd55c91a0","sha256":"33d18bd6aa09439d4ff2b2176e12d5ddf783816de932887a5650e96bab729c72","sha512":"ffa07838b4e8fa85bd49022d6d9719e347ab340bbbbac296709a3583c44048685c85f14ab8fe72c56ad4a6e3f77a7d531f4d48655f4ef6267c365de69513b240","ssdeep":"","tlshash":"ab016813b108e31432a614347b8baa18fd2ac2561c95453f381cf9324f57a63cedaae3","size":772,"data":"","first_seen":"2026-05-25T19:22:56.253262Z","last_seen":"2026-07-17T21:21:51.250172Z","times_seen":628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"056f78fa3b68e1804f2e850531d4d368","sha1":"5e92d48844344be1af522e88528e8443a5247257","sha256":"f829d350554d7e2510adef6d49e916dddb27e4866aadea52a766ada81d94956d","sha512":"e583a4b8ad8fac6510af81ab788a05f65967bfc5cea83ede04832cb2af6ec462be29204235335683ea69679ece359a5efbc6632f3c63c1d0859ce5760a0da8a1","ssdeep":"","tlshash":"d5216b3822b24134523bc0bf65b05b8b7f70043e36498a6a3d2c52592ebac9535d94f3","size":1267,"data":"","first_seen":"2026-06-17T13:50:44.24423Z","last_seen":"2026-07-14T11:31:03.487027Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"810b50212c1ead09442e6221f1860168","sha1":"29641f72c0f3337395ed1669013fe1c555edc8a1","sha256":"699aa14141a1351f9ba0244d116600e3f45211f3c59ba38f0280f306602a6086","sha512":"778ec84edf26d85108dff00a624c64e941f6f755483146f668b145976654b0e12e7c97b391cb8823d1e057d76aafa96c80b0735dbee1f242559c8367d20cb556","ssdeep":"","tlshash":"42c02b88250a4c7185f7ab008bbff504f4113304e4d00c33081a23044d50e1fd704808","size":153,"data":"","first_seen":"2026-06-27T00:24:20.592792Z","last_seen":"2026-06-27T02:01:54.428313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b242e6695334d43b991d1ce0f9e7525a","sha1":"d5f006abb1e8c89275221957cbd811c0655443db","sha256":"c65047966a53f8b9bde09b69bd06e2a0806a900b8e4729969d160628c7443906","sha512":"3906ee74ee98f7a2667ab35f7545af4109cb15b8b74f653ff6b6ad882873671dea6ac78fa664fb5b425ae638aad21899868d3210fba7ad26d07b725cb31ac0b9","ssdeep":"","tlshash":"cac02bcc214a4c7041e72b018b3fb600b041331494e07a310c0a23084d20e03d784c14","size":149,"data":"","first_seen":"2026-06-27T00:24:20.593705Z","last_seen":"2026-06-27T02:01:54.429173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"832a538955602c4a9684587e504a726f","sha1":"3a7359dd267a73c7792ff2ba1f05906df9f9f55e","sha256":"fc075b14fdd84e42738dea96b41e67f4e7a9d02e86a2e471ba0f262cac7ecd07","sha512":"7a4614b4f8f3e9aeee53de4dcef101d04bcc0972c3fedcfc7298109d2606048fcc3c8e0592d668f220d2d698b08f7ba5319db736b004b20841b783feaeacf092","ssdeep":"","tlshash":"71c08caa1007b3002052c8270a6ca28463105e1b3d0834217ac090651fc942f48fafba","size":147,"data":"","first_seen":"2026-06-27T00:24:20.594513Z","last_seen":"2026-06-27T02:01:54.42997Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-07-17T21:43:52.011638Z","times_seen":45256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"bf385bfdb63846d7cbca8f6310af6a9e","sha1":"f6c5f43ca1a301dd7e0a8297ce6f0f30fafafe46","sha256":"65eef59d76cfc9b0a22d5780238a811d9f2e2f23e64b8dedd1eb897efca4429d","sha512":"87bbe6449270dca097d5512d3e15455d79b5d88260d9f461520c4a09a6d181fa62542c009c75717d727b157050d02418ab00f78f1a85bab3c6fa9ef92700c1d0","ssdeep":"","tlshash":"88312abfa5af0d030b61e613402dbbc51c510f6afc4012c7a01ddae611118c6223ac93","size":1568,"data":"","first_seen":"2026-06-27T02:01:54.431332Z","last_seen":"2026-06-27T02:01:54.431332Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/hwCvNzlTVT3mj.4614167.2b9ed.0.js","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"797790d396b3a94c165a12ac5ac7727d","sha1":"dc531e28420ef62e401a5a9362f0da332f8b04f8","sha256":"f7427f20e8ad21772b3c26f11e0cd71aee06a391910cb87958952d7ec3c85190","sha512":"9be747101d468638380c1c5faa63d72c1a8243bf7eb397d7aa14819863c89d31dbcfa0efd5afd4b655153711bb803c045a8937e60ed395813beaaa2f7eacd0c4","ssdeep":"192:MrvIrh56VmmV/GDJ/PMrYS6jtVV9JFDTARtq8w04vcswaw3wmhwewXwu:MrwWVxBKJsMHjLJFDERtq8w04vcswaw0","tlshash":"1832c6e678c0c41af2d28c1d76fb6e3d998554158283ba64f68ef73cc7ca4f44ae2250","size":11246,"data":"","first_seen":"2026-06-27T02:01:54.432403Z","last_seen":"2026-06-27T02:01:54.432403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4614167\u0026time=1782525689407","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/56e449b9fba1f2653c8cfe7b49394087/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1974dd8632c398804184940a29581df2","sha1":"5e3fcbe028ebbdedc7dec3a9d39d13b1bc7127bb","sha256":"7d0486e8471a2c9b24960986fd3f65fa07e15cb32e33b356814bdf6ad15c61b7","sha512":"752d5525bbf61dfcbc95c9e0527d8944eccdb1b1c0df8688e5b7add62e6437e3767615c789171ac95b0b30acb02a6fbfd4a9f0a3ac8bc41cbffda92461dcd75b","ssdeep":"768:ZoLBrSDjR8JDCAuYzokTqZGqnqriVFmCjAHfTnRZMiyBzwooajQFi+ywd:ZIrijMClXJqOTcHfgiyBEdsNwd","tlshash":"9233b6cc7fe1b09e06926473323fe48ba5691d65514dd04cd807e0b8ba9c75aeb3ba1c","size":51181,"data":"","first_seen":"2026-06-27T02:01:54.420262Z","last_seen":"2026-06-27T02:01:54.420262Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-R0J6V9FTRF\u0026cx=c\u0026gtm=4e66o1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d41f5a6b7669da74ce90847e6caf824","sha1":"0d350717dd6f9b57a6ddc283f2e9c4a9baa2add9","sha256":"3b0d628c81faaf655115fcbfdcd9d53aabcb42f7f7c95fc796bcb5d7ecf78665","sha512":"5b89823732c8af5e124517dfc008ce99758b1edc0acd8bb8b736c406da06589b69a33dd41067cc0c9f5bf6349775f75b803914764426e268e84a6226ea8d0205","ssdeep":"6144:A5zjmk0EUmKtdNjyXkVCva/h/ge1CWMHObXxUQgcshQAGio:EzmmkYvfcUDG1","tlshash":"8894f8cdb3d674665392f478903f018ba67a68e2b44cc899f185ccd42e7469a8237f7c","size":433463,"data":"","first_seen":"2026-06-27T02:01:54.415789Z","last_seen":"2026-06-27T02:01:54.415789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4614167\u0026time=1782525689465","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4614167\u0026time=1782525705025","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1g1lhd4vferpn.cloudfront.net/2394295.js","fqdn":"d1g1lhd4vferpn.cloudfront.net","domain":"d1g1lhd4vferpn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/js/cookienotice.js","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-17T21:44:28.916588Z","times_seen":130367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-263651118-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a63cfaed4cd963a3429d3a0bcb7f6274","sha1":"50094a3869df82c42327455fc0c58f814352e1e7","sha256":"f2bedbde13b93d43b2ea27bd58b2cbde2285391999116a127beba113b5f4aa7e","sha512":"44068c85b79fb3469141c62bd1d98249b907dbddfbb8ba8d2c95beea373c68ca09f15f43e51c9ff3c853ab818fb7ec364808c0289325e90d65287f48a2e919c4","ssdeep":"6144:g8bmk0EUYtdNbyX0ka/A1ge1CWMHOb4RndCJABzw:g8uMkGxnMJ1","tlshash":"a17409cdb3d674229393a478503f018ba27a78d2f84cc899f186d8d42e746998277f7d","size":366900,"data":"","first_seen":"2026-06-27T02:01:54.419148Z","last_seen":"2026-06-27T02:01:54.419148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04XSYS3QGH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4db7b165b8b5fc20482b40252f17e9bc","sha1":"498024b9957fe7c0dfc2688782c166a5a1ad7097","sha256":"5b5d88344b7c75d35b321033728193a7ebb16fbfc95c6545be05fb41105445b0","sha512":"a7f1084539463f3f7cbf5dc9e6bc9d5492a14b72a96f51d56c2968b30307ed63631854dc26521fbe5d24295999e10d30302ff038f91b76e2f8e24b378325660a","ssdeep":"6144:rn5gax/0k289wFxe5VniPfHvpuY+SiAI/R+lwQjn1AJnnhyz:75g82mse5ifWdQjn8kz","tlshash":"9fa408cdb3d674625396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","size":482576,"data":"","first_seen":"2026-06-27T02:01:54.424017Z","last_seen":"2026-06-27T02:01:54.424017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3baa8c4b6690775e5811b93347752007","sha1":"96704f1b478b004992652ee19e9e313e16c71adb","sha256":"754c6b9aebcda4551ed29fd428559c8483f488920af193ffd011ed00fb3041a1","sha512":"dcc93f315dcc9fb48d1531dd9c72d3284edbef57fb46ffa24843b9f7dc2114c8e0865fcd2681fa45de413d0d53e6bf663d2a348675c0c0a883b3f6d616a280ab","ssdeep":"","tlshash":"49c08c8a2f06351071127a4eef4833c98fd0271ab130742094e8c0a6b4e32330591089","size":145,"data":"","first_seen":"2026-06-27T02:01:54.43442Z","last_seen":"2026-06-27T02:01:54.43442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"256a745cabec289bd6d346352f92a397","sha1":"e3d876bcf08bae821a065df9934e76a76cdf6c03","sha256":"709c8dccae9643d3253265f438d247d0ec8f78529cc2b74b0b3b36a49af01c2e","sha512":"5f170e3a9771272ac76f8ad1ccd9e50ef9fad11fe6cc92b67fb44302fb517ebdb9341379803f79587ab84cdbbf2b68526e51493bf03a483255fd7acbc1202a30","ssdeep":"","tlshash":"4e21e7fbc11823cca3eed8e15368ab394c19083ef029fe02578e073c5148b14a07e5b4","size":1298,"data":"","first_seen":"2026-06-27T02:01:54.43558Z","last_seen":"2026-06-27T02:01:54.43558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4614167\u0026time=1782525704861","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d15skjf5hy9xr6.cloudfront.net/a3b4955.js","fqdn":"d15skjf5hy9xr6.cloudfront.net","domain":"d15skjf5hy9xr6.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.220","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ffa5cc8b36f81c22ef68cf33692e47f","sha1":"667e1f73aff4f51058a7fc68a1c59b7421759502","sha256":"ee0727080a365ba44f4edd8401e49a27fc8d70305740ace29e15c5646387aac2","sha512":"296b305bac5009591de53f9cc825ad8b41f439489bc064b7ecb09d63722da0b0e78c1879b99dfdd1f611293b8036f3e710da4be6d7b542f6718ce1662823cc90","ssdeep":"96:MSEytwPTtozaadKv5BxJljB/k/wXeWYyr8Lp7rv11jD6CfMEDaH:MS3wb6zmB7/kYXnrkpHvv6CkCaH","tlshash":"62a16bbbddda169c1242e06b527dbb082c11852fb404fe0bb8cdcb7a0f54b94197ace1","size":4698,"data":"","first_seen":"2026-06-27T02:01:54.436639Z","last_seen":"2026-06-27T02:01:54.436639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/heAr8tF7S8fjU.4614167.2b9ed.0.js","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"797790d396b3a94c165a12ac5ac7727d","sha1":"dc531e28420ef62e401a5a9362f0da332f8b04f8","sha256":"f7427f20e8ad21772b3c26f11e0cd71aee06a391910cb87958952d7ec3c85190","sha512":"9be747101d468638380c1c5faa63d72c1a8243bf7eb397d7aa14819863c89d31dbcfa0efd5afd4b655153711bb803c045a8937e60ed395813beaaa2f7eacd0c4","ssdeep":"192:MrvIrh56VmmV/GDJ/PMrYS6jtVV9JFDTARtq8w04vcswaw3wmhwewXwu:MrwWVxBKJsMHjLJFDERtq8w04vcswaw0","tlshash":"1832c6e678c0c41af2d28c1d76fb6e3d998554158283ba64f68ef73cc7ca4f44ae2250","size":11246,"data":"","first_seen":"2026-06-27T02:01:54.432403Z","last_seen":"2026-06-27T02:01:54.432403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"i.postimg.cc/3NFnxVrG/Click-Here-GIF-by-Moss-Make-Up-unscreen.gif","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.620Z","timestamp":1782525685620,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /3NFnxVrG/Click-Here-GIF-by-Moss-Make-Up-unscreen.gif HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/samue.png","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.623Z","timestamp":1782525685623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /samue.png HTTP/1.1\r\nHost: evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 902\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1860,"size_decoded":1296,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"59dd001061f694587c5b5c9d80cf3451","sha1":"013fa735e907a2648b20cc1214209e471662370b","sha256":"0fd3d3b11c28ac78e82f3985996832861349a0cb6b3f74fa6dbec05bacf327aa","sha512":"6e24ac57097616c2f8d5c270b49a751b533756c85a1efbfe4a255e345386e7d4f63f0e8254d917a9e524586b57a4785957eaa59bfdad3e73ffedc3f4d36c3ba9","ssdeep":"","tlshash":"95312273469d780a0f32e2dcb9f0731ab5c392afc7144c80f6ecaaeb4bc5b949451249","first_seen":"2026-06-27T02:01:54.406856Z","last_seen":"2026-06-27T02:01:54.406856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1cdbd1x576ga0.cloudfront.net/public/external/css_frontXF.css","fqdn":"d1cdbd1x576ga0.cloudfront.net","domain":"d1cdbd1x576ga0.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.139","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.036Z","timestamp":1782525686036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: d1cdbd1x576ga0.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:51 GMT\r\netag: \"17f6-60315f0f18c9f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 52b109b1375547c721208eb7c7b3185a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 9Z7Dcb4z3W_d51GhtrYIoNYmpaVcoLzYI-8BVyN2A5kWpyw6Ch0wVQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6134,"size_decoded":6602,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-07-17T09:25:23.509259Z","times_seen":3083,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":28,"connect":19,"send":0,"wait":365,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.071Z","timestamp":1782525686071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://evicgame232.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 26 Jun 2026 18:56:41 GMT\r\nexpires: Sat, 26 Jun 2027 18:56:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 25485\r\nlast-modified: Mon, 15 Sep 2025 16:31:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13336,"size_decoded":14168,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13336, version 1.0","md5":"0d8be37b5302f048939e778614ae257f","sha1":"ee418b76411412b8467564adb668b667caa4d0de","sha256":"9026a021afff0af0c99fbad3668cf0402b497cc580c46e94bd685a2e8065c9da","sha512":"cf4457a0759ddc75546bf3beb3fd86c68880a7359da39a134efc9a2383578e44ff9601627102953a194135c63872ff2a1271c845a329bd497a974920bbd70256","ssdeep":"384:Kk0D3rqH6q4XF/hhz6e+OjW1CyR+sOAwYkLkUpzoa:4bqH61/SOj5LkUpp","tlshash":"d952d0784cd4854ffe83e2f8ac1cd90d2d6aeeb9bc0841265d1a4e471f83e379b89590","first_seen":"2025-06-03T08:53:08.197786Z","last_seen":"2026-07-14T11:31:03.473998Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":183,"dns":0,"connect":37,"send":0,"wait":35,"receive":5,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.evicgame232.blogspot.com/","fqdn":"www.evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T02:01:24.791Z","timestamp":1782525684791,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://evicgame232.blogspot.com/\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nDate: Sat, 27 Jun 2026 02:01:24 GMT\r\nExpires: Sat, 27 Jun 2026 02:01:24 GMT\r\nCache-Control: private, max-age=0\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-XSS-Protection: 1; mode=block\r\nContent-Length: 200\r\nServer: GSE\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"www.evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T02:01:24.987Z","timestamp":1782525684987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Sat, 27 Jun 2026 02:01:25 GMT\r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 25 Jun 2026 05:43:21 GMT\r\netag: W/\"137708de400d24e8524e5cc8f9dc335c2d63789a4b915e13b8ee5224708ef780\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 4998\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":18906,"size_decoded":5489,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (345)","md5":"82609fd1ee68c41b919c73f03c68c7a2","sha1":"e5fa78b74f0d96325ad159a6273bf73760c82deb","sha256":"e8e2e6ca071afbf5aea69a55d93444c7902cbaf545b3c145ee882c22896bc694","sha512":"0442ae3bd0bf4642fb26c585d9a98d803856d888e88410116107cb979e6e6d3c7ccb8d90d1085491d4dae8f2357faf6611dc68b8d15f98823882a1c1021eed82","ssdeep":"384:7EUF7ryrrUymXYYag4Lm4Gu91aLPSTimimziUi0Dili1i4ijp2S:gUF/yrrUymXYYag4q4Gul23ZJXUkVjpD","tlshash":"958294232de484077621c098bcf1a70e36b5d153dd4ac9bd32ec229d2fc9fd6a993295","first_seen":"2026-06-27T00:24:20.539329Z","last_seen":"2026-06-27T02:01:54.409503Z","times_seen":2,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":25,"connect":31,"send":0,"wait":172,"receive":10,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kumbh+Sans:wght@520\u0026family=Mochaiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.593Z","timestamp":1782525685593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Kumbh+Sans:wght@520\u0026family=Mochaiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Jun 2026 02:01:25 GMT\r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13347,"size_decoded":2636,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1e0604368f69f3adb751f2f062e9fce6","sha1":"9d81ca5c9ecf397613a8f93a8bc6802b026294b9","sha256":"f3f06e5e003652e859719f903f5931dc7fea1678419161b3411b460b2ff587fd","sha512":"f79432b28723545e3eede01a8682d731fb73bb150d4ca510ae97ca33cf4e347fa0c0351de80f1d817ad5d09b2c85f850b006270ef30a2ed7133b2c712fe30084","ssdeep":"192:5bqVybqGIwVvPakow9bIdaDgKQFVwa3RzJ4iazjjNoNj4NGLSfDLSTLSS4LSE:AAqYcONB3","tlshash":"46523091042ba104db931cc223ce7e36ee0ea250b450d539affd1d89ed9bc6a237571d","first_seen":"2025-11-27T15:46:19.317479Z","last_seen":"2026-06-27T02:01:54.411181Z","times_seen":7,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":70,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:27.400Z","timestamp":1782525687400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: de6jvomfbm0af.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Sat, 27 Jun 2026 02:01:27 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:50 GMT\r\netag: \"70c-60316183ba14c\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 7d287cb7ea5225b8d6559a32aee5ce72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: HM-rQbtizEcUgxAmH_r5bB98ezrdTJQcVKZcFfHeZJZIW_aqZbzdjQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1804,"size_decoded":2271,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-07-17T09:25:23.516876Z","times_seen":2110,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/js/cookienotice.js","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.602Z","timestamp":1782525685602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Jun 2026 00:23:47 GMT\r\nexpires: Sat, 04 Jul 2026 00:23:47 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 26 Jun 2026 14:35:05 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 5858\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6513,"size_decoded":2717,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-17T21:44:28.916588Z","times_seen":130367,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/bi/10/22/85/1022851f8588320f84450c791299737b/1596641253.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:27.034Z","timestamp":1782525687034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 02:33:42 GMT","end":"Tue, 04 Aug 2026 02:33:41 GMT"},"fingerprint":{"sha1":"C1:98:76:68:C0:8B:B9:63:F0:C3:39:51:44:97:B5:E1:8D:C0:2F:94","sha256":"05:2D:DF:45:9A:F6:C6:13:32:59:AB:3B:E0:4C:DB:4B:C6:CA:48:07:A2:C1:1E:0C:F8:98:05:76:B4:C8:E3:FF"}}},"request":{"raw":"GET /bi/10/22/85/1022851f8588320f84450c791299737b/1596641253.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 02:01:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10601\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 05 Aug 2020 15:27:36 GMT\r\netag: \"5f2acfe8-2969\"\r\nexpires: Mon, 29 Jun 2026 02:01:27 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10601,"size_decoded":10949,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 468x60, components 3","md5":"54ae9ac1dd44fbc3e88664bd01578f42","sha1":"c5794fadc819a0a28f4926f8804796b6a5a96017","sha256":"b830843acc45486dae1fff67881e2c60115774064fa01ebdeb73982b5e0e39b5","sha512":"d8b1c675c01d50a1b081b2fdab738065c4e22d699daa2800bed762217039ba30b467b729bb3e0d3c1f529b63ec0de0518acdd33d89593190eb64ad8f3bc59e3e","ssdeep":"192:NllllldkiwlMy6sjj9xo1WQfygfGXxURPZs3JcWYypvKyiOzGvE7avvvvvvG:9HwlMyvxo1W2yp0+JaypSy3iM7avvvvm","tlshash":"ce227c0849ccf1fe21df2ab1c9526c7958fe3414a2a944f513e22ae1e765c328bf50f2","first_seen":"2023-05-07T23:26:47Z","last_seen":"2026-06-27T02:01:54.413156Z","times_seen":101,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":4,"connect":27,"send":0,"wait":21,"receive":5,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1g1lhd4vferpn.cloudfront.net/2394295.js","fqdn":"d1g1lhd4vferpn.cloudfront.net","domain":"d1g1lhd4vferpn.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.595Z","timestamp":1782525685595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /2394295.js HTTP/1.1\r\nHost: d1g1lhd4vferpn.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Apr 2026 13:57:28 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Sat, 27 Jun 2026 01:41:13 GMT\r\netag: W/\"ea59f4a53936cd48199eace769df6246\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 ba6ea0ac48ef516c00fa1bd16e2e5c2a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 4kXvSafMfY5Gw0ozQy0ywHcLRtqo4XZb8z4lJe4IVOb4eq6ENHfYSQ==\r\nage: 1280\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27325,"size_decoded":8126,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":22,"connect":13,"send":0,"wait":366,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.rbxcdn.com/7c5fe83dffa97250aaddd54178900ea7.png","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"2.23.13.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:27.202Z","timestamp":1782525687202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /7c5fe83dffa97250aaddd54178900ea7.png HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: qiH70RnW4pbGHnTN4/GfOIKGKZU9eJkvCawicOxyPOnrC7uWEqO/uPq9zDO+pFgzeN2ng56/vIgkZl1AbnWawQ==\r\nx-amz-request-id: HKF9K7JJ44SETG5X\r\nlast-modified: Tue, 25 Jun 2024 22:20:44 GMT\r\netag: \"7c5fe83dffa97250aaddd54178900ea7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: SXFOtkrG.KDci.hY3eoScEWVBObgFt62\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 8743\r\nserver: AmazonS3\r\ncache-control: public, max-age=6055773\r\ndate: Sat, 27 Jun 2026 02:01:27 GMT\r\nakamai-request-bc: [a=2.23.13.78,b=39927357,c=g,n=NO__OSLO,o=20940]\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nrbx-cdn-provider: ak\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8743,"size_decoded":9558,"mime_type":"image/png","magic":"PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced","md5":"7c5fe83dffa97250aaddd54178900ea7","sha1":"9898365b2ab676aa6ea360f7b5c2b1e60f54915e","sha256":"9fe741c1385e35b0da5b3cf15aad81e7714fac5bfb4cf535b2e04613c0a2b059","sha512":"3617ab1bd027739b97d63b9f408985725685ece4b239fb8e805720037f727712c3f9076eaa60110203e31b538f75cf3e07efd1178152f8c8912a5c465dd5b3a0","ssdeep":"192:SVUh1vZr8FWM8Y4gtjqQloFjRqwwR0Px8Qc5/jiLC38v1sRSguSZpAup:EEoFWMH5jqUoFjR3JPOQcFj4o8v1scgB","tlshash":"af02ae5a84e9bc48934a9d6cd7a3927e8d6307c77275c2ab655c1b0b5d3fc434e60388","first_seen":"2024-07-12T00:57:36Z","last_seen":"2026-07-17T20:19:35.953251Z","times_seen":14059,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-R0J6V9FTRF\u0026cx=c\u0026gtm=4e66o1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.374Z","timestamp":1782525686374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtag/js?id=G-R0J6V9FTRF\u0026cx=c\u0026gtm=4e66o1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\nexpires: Sat, 27 Jun 2026 02:01:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 152009\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433463,"size_decoded":152593,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"7d41f5a6b7669da74ce90847e6caf824","sha1":"0d350717dd6f9b57a6ddc283f2e9c4a9baa2add9","sha256":"3b0d628c81faaf655115fcbfdcd9d53aabcb42f7f7c95fc796bcb5d7ecf78665","sha512":"5b89823732c8af5e124517dfc008ce99758b1edc0acd8bb8b736c406da06589b69a33dd41067cc0c9f5bf6349775f75b803914764426e268e84a6226ea8d0205","ssdeep":"6144:A5zjmk0EUmKtdNjyXkVCva/h/ge1CWMHObXxUQgcshQAGio:EzmmkYvfcUDG1","tlshash":"8894f8cdb3d674665392f478903f018ba67a68e2b44cc899f185ccd42e7469a8237f7c","first_seen":"2026-06-27T02:01:54.415789Z","last_seen":"2026-06-27T02:01:54.415789Z","times_seen":1,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSvW8c1Rd9sz__CoSUiABpQGiLFERi1_M9O6SIFPFRIDuIBEWI6n0uL56dN5k3s7vZyiEIUVpUlOOzdtxF0NGB1hGNESLTbRE3_ANIkVKjdVYy4hb33vfOld45755v9-tT0kdNl59umZnOMroZ9d3uu3d0LszEdrdvdz23717r3tF5HF7rTlepHL_vBWHfvdr9WPIds-m7nut6rtf9SJdSmenmGQpdPPbSqB-Hfc8b9L3Ix7T8742tHVjqQIxPySVo0V78S30JzRfIRz9-IO1OZYr3PhzVGa1MibE4-jzfyc0kx-i8VaUDlR-tp2FsS8gPHZj8aK0CZnywUgGmW9K5_AwsP1pTBRsfvmTLMsgcTLyKyXgBmR1D0wW4eQgtnhKAC2zfRD56tG3KCb3_EqUrtCUbL55DT1qy8ewN5KPHNzI97d4yWV1pk1tMVQM9XUAPFyjqY1SzDvTkGLz6Glr8QdzOO8hHh1u0Lim0WF7xXKVSmXo9kaqkFzI_6g1klPQ8FlNPyUiEPD77I60WoLaD2jqotYNadVAXHYzEskvTgWJpHNJUqkQJ10s4jYIgTcLIVzGPUPMH0GIPvNxFUe5iR3_fEufNrZY4r1yGFQ5sRTAWzaHIrG-bRyKzNfPW1V_XoJmbarhPD001lDkBLfdQiuZAF_fsQ_Dqf_OZsp_MzSpRVjVzykQz16IiKO8tr7heqtyYq14SxrKX-DLqDZIk7rmKJcwXA5_74kDZqv73aKCiXuIL3kuTmPdcGnKVpKHHBt5-cUpeW63E-e27_2NHLrtRLMMwZali1FN-HAV8wJVMWJgGaegOEljdQNsOqHUw0y354vAqCt2S4OoTMHoMmx2D67dB67dAJ_MwHoB-hdjFLP9ZjjUf0pH0A7_PMjO0han63IwgTIOi2kB139nPTsnr889u3_j1zCryz0uQ_ISsA7xsUJQN7uonBMPswU83i0qP9IyuvHOropV0QPXTCxfAdUs2tn8_M_HF7YvgxS5scXL9eXAWsIaAFQSZJsjk-QuUNbDy5Je_12d23u_bbzAsHbDMmbOsJAcsK7M9WL3sDnzfdbnnpyKNwjQYKBmFXpLIyAti6QYRKtvevd5_8U8AAAD__5t3ouhBBAAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:27.036Z","timestamp":1782525687036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 00:47:49 GMT","end":"Tue, 22 Sep 2026 00:47:48 GMT"},"fingerprint":{"sha1":"87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86","sha256":"67:18:E9:1C:95:CB:61:84:4D:60:01:1C:16:48:37:7B:2E:C8:F8:D8:5E:D6:45:88:45:39:0F:23:D7:70:A9:12"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSvW8c1Rd9sz__CoSUiABpQGiLFERi1_M9O6SIFPFRIDuIBEWI6n0uL56dN5k3s7vZyiEIUVpUlOOzdtxF0NGB1hGNESLTbRE3_ANIkVKjdVYy4hb33vfOld45755v9-tT0kdNl59umZnOMroZ9d3uu3d0LszEdrdvdz23717r3tF5HF7rTlepHL_vBWHfvdr9WPIds-m7nut6rtf9SJdSmenmGQpdPPbSqB-Hfc8b9L3Ix7T8742tHVjqQIxPySVo0V78S30JzRfIRz9-IO1OZYr3PhzVGa1MibE4-jzfyc0kx-i8VaUDlR-tp2FsS8gPHZj8aK0CZnywUgGmW9K5_AwsP1pTBRsfvmTLMsgcTLyKyXgBmR1D0wW4eQgtnhKAC2zfRD56tG3KCb3_EqUrtCUbL55DT1qy8ewN5KPHNzI97d4yWV1pk1tMVQM9XUAPFyjqY1SzDvTkGLz6Glr8QdzOO8hHh1u0Lim0WF7xXKVSmXo9kaqkFzI_6g1klPQ8FlNPyUiEPD77I60WoLaD2jqotYNadVAXHYzEskvTgWJpHNJUqkQJ10s4jYIgTcLIVzGPUPMH0GIPvNxFUe5iR3_fEufNrZY4r1yGFQ5sRTAWzaHIrG-bRyKzNfPW1V_XoJmbarhPD001lDkBLfdQiuZAF_fsQ_Dqf_OZsp_MzSpRVjVzykQz16IiKO8tr7heqtyYq14SxrKX-DLqDZIk7rmKJcwXA5_74kDZqv73aKCiXuIL3kuTmPdcGnKVpKHHBt5-cUpeW63E-e27_2NHLrtRLMMwZali1FN-HAV8wJVMWJgGaegOEljdQNsOqHUw0y354vAqCt2S4OoTMHoMmx2D67dB67dAJ_MwHoB-hdjFLP9ZjjUf0pH0A7_PMjO0han63IwgTIOi2kB139nPTsnr889u3_j1zCryz0uQ_ISsA7xsUJQN7uonBMPswU83i0qP9IyuvHOropV0QPXTCxfAdUs2tn8_M_HF7YvgxS5scXL9eXAWsIaAFQSZJsjk-QuUNbDy5Je_12d23u_bbzAsHbDMmbOsJAcsK7M9WL3sDnzfdbnnpyKNwjQYKBmFXpLIyAti6QYRKtvevd5_8U8AAAD__5t3ouhBBAAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.a98y-YD-T0WvnsCZ8AF7gVqNWuwo94AFKa9olL5vEJY; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl29788165=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 27 Jun 2026 02:01:27 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,X-Device-User-Agent,User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nset-cookie: iprc_l+68df5e9a20e2bdcea356f16142afa8e6=6672402; Path=/; Expires=Sat, 11 Jul 2026 02:01:27 GMT; Secure; SameSite=None\niprc_l-6672402=1; Path=/; Expires=Sat, 11 Jul 2026 02:01:27 GMT; Secure; SameSite=None\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7eaabcf245639309367c88895b91debe\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.792Z","timestamp":1782525685792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://evicgame232.blogspot.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29424\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\nexpires: Sun, 27 Jun 2027 02:01:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:36 GMT\r\ncontent-type: font/woff2\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29424,"size_decoded":30252,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29424, version 1.0","md5":"62fc60979b530feaf3c27c45fbfd9d57","sha1":"c384a32c7643e137d25b0a43175ab6ba0ba36e94","sha256":"d253244d475e8b0d5c521b1742f1ae3ec29280c113a6f29dad54bc4f320311d1","sha512":"ed0be079d2d163d9c4e251a68798f3f6b1f39d7cf19a8a50547f833f7bad35cd2a59f043fd00b7d8ea9f5bbe323d5172c07b9b2ec262e2e83bcd6370e86404d6","ssdeep":"384:K39gcKf3N9TvweI98vfZG5Y0JaJXNemXLxWL4nEbsq9mog90xNbSIO0VrQKL5RJl:069dwey8pH0ghVLxWL4nMx9Bb+IOudl","tlshash":"92d2f2c8f7f83c00868db63956dccf60110d387765a4de069ef46978a67163bdc8a9a4","first_seen":"2025-06-03T08:53:08.201346Z","last_seen":"2026-07-17T11:01:07.968388Z","times_seen":2703,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":43,"receive":31,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.183.88.246","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.207Z","timestamp":1782525686207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 14 Apr 2026 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:66:77:D7:9E:99:80:D4:C4:22:4B:79:2F:16:2B:49:2C:08:07:99","sha256":"54:26:39:E0:45:11:B3:20:EE:6C:3E:B3:C0:57:5D:F2:28:8C:E0:E1:C4:F0:BD:56:E7:8C:91:6B:40:CC:0E:0D"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://evicgame232.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://evicgame232.blogspot.com\r\nset-cookie: uid_id2=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6:2:1; Expires=Tue, 24 Jun 2036 02:01:26 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":486,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f5a4dbcfc5640aa55430bd8a37ffbea4","sha1":"6cd92f992aa64135ea432ccf02dcee81a9d4ba8e","sha256":"d50179395cd060e4b3b3e7616c18e26b68143d51a1d68cc3c4ae18bf150e67b6","sha512":"c85fb98d6001f972f383ee1a8bd06eb14d3c2ab3695f62c45a066c16432f91fd315fb3fb8625ea3929f450d0dc9534590ca8cc2813f940cf920b5ba9def1d522","ssdeep":"","tlshash":"9b9004c41dd417c30741030cd5541cc55111033c4c001c141dfd530c0510f504d51050","first_seen":"2026-06-27T02:01:54.417566Z","last_seen":"2026-06-27T02:01:54.417566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":5,"connect":24,"send":0,"wait":30,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1429398284425.js?key=56e449b9fba1f2653c8cfe7b49394087\u0026kw=%5B%22roblox%22%2C%22robux%22%5D\u0026refer=https%3A%2F%2Fevicgame232.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=\u0026uuid=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.380Z","timestamp":1782525686380,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 00:47:49 GMT","end":"Tue, 22 Sep 2026 00:47:48 GMT"},"fingerprint":{"sha1":"87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86","sha256":"67:18:E9:1C:95:CB:61:84:4D:60:01:1C:16:48:37:7B:2E:C8:F8:D8:5E:D6:45:88:45:39:0F:23:D7:70:A9:12"}}},"request":{"raw":"GET /watch.1429398284425.js?key=56e449b9fba1f2653c8cfe7b49394087\u0026kw=%5B%22roblox%22%2C%22robux%22%5D\u0026refer=https%3A%2F%2Fevicgame232.blogspot.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=\u0026uuid=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://evicgame232.blogspot.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sat, 27 Jun 2026 02:01:26 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://evicgame232.blogspot.com\r\nlocation: https://kettledroopingcontinuation.com/watch.1429398284425.js?dev=e\u0026fstu=019f06cf-73f5-72dc-976c-0a4cf7941b81\u0026key=56e449b9fba1f2653c8cfe7b49394087\u0026kw=%5B%22roblox%22%2C%22robux%22%5D\u0026ps1=1782525686\u0026rb=\u0026refer=https%3A%2F%2Fevicgame232.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=eT9wjJRNAhoeOYQgXsHFJh2bF5htbeXVHNMei4M6fJ4\u0026shv=2\u0026st1=b573a6e0cf304681f66b7e2e18a0a138\u0026tz=0\u0026uuid=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6%3A2%3A1\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nset-cookie: uid_id2=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6:2:1; Path=/; Expires=Sat, 04 Jul 2026 02:01:26 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTc4ODE2NSwiayI6IjU2ZTQ0OWI5ZmJhMWYyNjUzYzhjZmU3YjQ5Mzk0MDg3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1ODc0OTg1LCJwaWQiOjMzNTMwMjgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MjcsInB0Ijo0LCJwayI6IngzZGppNnYwYTkiLCJjcGtzIjp7IjI4IjoiNmI4MDgyYzFkYzdhMmNkOTE3YmNmNTJlODUyNjJlOWIifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2V2aWNnYW1lMjMyLmJsb2dzcG90LmNvbS8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.a98y-YD-T0WvnsCZ8AF7gVqNWuwo94AFKa9olL5vEJY; Path=/; Expires=Sat, 27 Jun 2026 02:02:26 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 46\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a7e769064e29804cbd5ad7240d627ac2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":8,"connect":93,"send":0,"wait":155,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zr-dqb.pages.dev/robux-removebg-preview.png","fqdn":"zr-dqb.pages.dev","domain":"zr-dqb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.619Z","timestamp":1782525685619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zr-dqb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 May 2026 06:24:39 GMT","end":"Fri, 21 Aug 2026 07:23:15 GMT"},"fingerprint":{"sha1":"E5:A5:52:CF:C1:FB:D6:F9:50:F4:58:39:E7:59:76:10:81:C5:3B:6A","sha256":"B1:F3:C6:F6:5E:16:59:19:4B:97:F3:28:C1:20:FA:7B:C0:8D:DA:B4:7B:99:0D:9A:87:D5:13:B4:75:3D:4E:09"}}},"request":{"raw":"GET /robux-removebg-preview.png HTTP/1.1\r\nHost: zr-dqb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 23649\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3a36710abe566794b2de078acbd1b24d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf4kFdZcWCMTLsa72pxSQbSdQmXNPjrc9E7Y7%2BKKcBGNDvyI5UsXQgpfBdCuWVE2EuI9Hu7RN%2Bd4a%2F5ntuyrrnBwyR7vika%2F%2BtAn8vxRhFb9sGqJ9qQHgYogvD1PzOgDWhfj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a120dd200a2956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23649,"size_decoded":24382,"mime_type":"image/png","magic":"PNG image data, 237 x 259, 8-bit/color RGBA, non-interlaced","md5":"9b14ec704d1116bc502d0e67bfd5e31b","sha1":"99f6869cb69d036bf4ca43a02001c826b21f5b92","sha256":"753ea619f4ca02128ecdca16fd365a2022d3b0cd5a2c94fd6574a0a5d3b963b4","sha512":"a33a1d5c7bd83f06155969f77a83d26ca9ee89d7644d000a27c7f523fbd0987fbb1e1e517f9e28ded1097b437c403c9b921bc982ac1409f7f7930b90f31a97ff","ssdeep":"384:LlbhiKPLut/XhuXhER98u8aMogn/D8cTboOfnBYgUQkgGQaddJ4:p4KKt/x6U8u8aMogn/LTlu5QDGJ4","tlshash":"d7b2e192c4398c46e85f77c0a75addb375b905ee2a0fa635fbe055420e680c6492acc3","first_seen":"2024-06-30T06:50:15Z","last_seen":"2026-07-11T20:49:17.510937Z","times_seen":287,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":120,"dns":6,"connect":1,"send":0,"wait":21,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"zr-dqb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evicgame232.blogspot.com/sara1.png","fqdn":"evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.622Z","timestamp":1782525685622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /sara1.png HTTP/1.1\r\nHost: evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 902\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1860,"size_decoded":1296,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (536)","md5":"59dd001061f694587c5b5c9d80cf3451","sha1":"013fa735e907a2648b20cc1214209e471662370b","sha256":"0fd3d3b11c28ac78e82f3985996832861349a0cb6b3f74fa6dbec05bacf327aa","sha512":"6e24ac57097616c2f8d5c270b49a751b533756c85a1efbfe4a255e345386e7d4f63f0e8254d917a9e524586b57a4785957eaa59bfdad3e73ffedc3f4d36c3ba9","ssdeep":"","tlshash":"95312273469d780a0f32e2dcb9f0731ab5c392afc7144c80f6ecaaeb4bc5b949451249","first_seen":"2026-06-27T02:01:54.406856Z","last_seen":"2026-06-27T02:01:54.406856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.evicgame232.blogspot.com/","fqdn":"www.evicgame232.blogspot.com","domain":"evicgame232.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T02:01:16.839Z","timestamp":1782525676839,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.evicgame232.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"www.evicgame232.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d15skjf5hy9xr6.cloudfront.net/a3b4955.js","fqdn":"d15skjf5hy9xr6.cloudfront.net","domain":"d15skjf5hy9xr6.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"108.157.217.220","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.607Z","timestamp":1782525685607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /a3b4955.js HTTP/1.1\r\nHost: d15skjf5hy9xr6.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Apr 2026 13:57:28 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Sat, 27 Jun 2026 01:55:29 GMT\r\netag: W/\"ea59f4a53936cd48199eace769df6246\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 6b590e690e32695caa633ab770319d74.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: 07NCVElJ1G5JQ0sep4DEEH7sY-24E2YC4kR9hwamV4XfLPfq1uhIDw==\r\nage: 357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":7824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":32,"connect":8,"send":0,"wait":201,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"d15skjf5hy9xr6.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"d15skjf5hy9xr6.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/V6HQ99HJ/hd-roblox-black-symbol-sign-icon-logo-png-70175169478745256ylmn6eud-removebg-preview.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.617Z","timestamp":1782525685617,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /V6HQ99HJ/hd-roblox-black-symbol-sign-icon-logo-png-70175169478745256ylmn6eud-removebg-preview.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-263651118-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.609Z","timestamp":1782525685609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtag/js?id=UA-263651118-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\nexpires: Sat, 27 Jun 2026 02:01:25 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 27 Jun 2026 00:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130434\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366900,"size_decoded":131084,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5513)","md5":"a63cfaed4cd963a3429d3a0bcb7f6274","sha1":"50094a3869df82c42327455fc0c58f814352e1e7","sha256":"f2bedbde13b93d43b2ea27bd58b2cbde2285391999116a127beba113b5f4aa7e","sha512":"44068c85b79fb3469141c62bd1d98249b907dbddfbb8ba8d2c95beea373c68ca09f15f43e51c9ff3c853ab818fb7ec364808c0289325e90d65287f48a2e919c4","ssdeep":"6144:g8bmk0EUYtdNbyX0ka/A1ge1CWMHOb4RndCJABzw:g8uMkGxnMJ1","tlshash":"a17409cdb3d674229393a478503f018ba27a78d2f84cc899f186d8d42e746998277f7d","first_seen":"2026-06-27T02:01:54.419148Z","last_seen":"2026-06-27T02:01:54.419148Z","times_seen":1,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":221,"receive":109,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/56e449b9fba1f2653c8cfe7b49394087/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.610Z","timestamp":1782525685610,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 22:27:03 GMT","end":"Sat, 05 Sep 2026 22:27:02 GMT"},"fingerprint":{"sha1":"54:46:9A:99:5D:9F:19:5B:67:21:55:1F:5C:6F:38:A2:52:41:7E:57","sha256":"35:BA:52:C1:31:7C:AD:F1:9A:03:6D:D2:37:B7:E5:67:B2:0A:BF:BB:B5:70:84:A4:4D:4E:AE:90:2A:2A:72:47"}}},"request":{"raw":"GET /56e449b9fba1f2653c8cfe7b49394087/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 27 Jun 2026 02:01:26 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-CH-UA-Mobile,Device-Stock-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version,X-Device-User-Agent,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 78948f91b79726ac19dac5156ccd87f0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51181,"size_decoded":20763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51181), with no line terminators","md5":"1974dd8632c398804184940a29581df2","sha1":"5e3fcbe028ebbdedc7dec3a9d39d13b1bc7127bb","sha256":"7d0486e8471a2c9b24960986fd3f65fa07e15cb32e33b356814bdf6ad15c61b7","sha512":"752d5525bbf61dfcbc95c9e0527d8944eccdb1b1c0df8688e5b7add62e6437e3767615c789171ac95b0b30acb02a6fbfd4a9f0a3ac8bc41cbffda92461dcd75b","ssdeep":"768:ZoLBrSDjR8JDCAuYzokTqZGqnqriVFmCjAHfTnRZMiyBzwooajQFi+ywd:ZIrijMClXJqOTcHfgiyBEdsNwd","tlshash":"9233b6cc7fe1b09e06926473323fe48ba5691d65514dd04cd807e0b8ba9c75aeb3ba1c","first_seen":"2026-06-27T02:01:54.420262Z","last_seen":"2026-06-27T02:01:54.420262Z","times_seen":1,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":2,"connect":91,"send":0,"wait":104,"receive":94,"ssl":281},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.rbxcdn.com/9a75b1267d260322206e98bd256138d4-premium_title_bg.jpg","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"2.23.13.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.055Z","timestamp":1782525686055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 May 2026 00:00:00 GMT","end":"Sat, 12 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:09:A3:4D:E5:89:81:97:71:5C:DA:6E:A1:15:02:B9:81:53:59:9D","sha256":"E2:A0:F7:C3:A0:D8:F6:BF:94:31:82:25:B0:5B:5F:FF:B2:E8:DE:3E:58:CD:AA:E2:D6:5A:A0:5E:68:04:7E:EC"}}},"request":{"raw":"GET /9a75b1267d260322206e98bd256138d4-premium_title_bg.jpg HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: d5zRgFSWOGLwP01rCN5Cq1Ac8hVFm2pq3hPD43CIbI0oW8QoaxPWI65BurHHxTrAPXQOf9DeJlg=\r\nx-amz-request-id: 6F1KA4A8D81NC0DG\r\nlast-modified: Mon, 22 Jun 2020 22:43:49 GMT\r\netag: \"9a75b1267d260322206e98bd256138d4\"\r\nx-amz-version-id: 9CkS1bR_5rN_48OnJeZHZggN8GuO9li9\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ncontent-length: 196910\r\nserver: AmazonS3\r\ncache-control: public, max-age=31421565\r\ndate: Sat, 27 Jun 2026 02:01:26 GMT\r\nakamai-request-bc: [a=2.23.13.78,b=39927352,c=g,n=NO__OSLO,o=20940]\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nrbx-cdn-provider: ak\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":196910,"size_decoded":197679,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1028x694, components 3","md5":"9a75b1267d260322206e98bd256138d4","sha1":"913333116d6acc8ff7bdb4c15e778e03ca1c0845","sha256":"42380c6d81c177779c40e4438358ed6ccf3921da53b3924dc582bec67f55947e","sha512":"a7ac9ddce8777278bcbaaa3e61f3e616a49b02eba3ab769dae6b495a2fb8ef72b3c561a69559c0c0a7ed803c29883be2f938401ea39374fbdd733eb13f2815da","ssdeep":"3072:UlSmf8LmepNpJI7SdF1W6npUn3gw7C19OLzFh87z60wJAUKKFK03zt:UlSPLp3pe2P1tpcgAKsxh/0sKKFJ","tlshash":"9e14132997942acbdece68818c0dd647e2d8d0d847c8e7832f47b8b4645c9e6cb6f005","first_seen":"2024-06-30T06:50:15Z","last_seen":"2026-07-12T03:39:50.680457Z","times_seen":259,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":414,"dns":7,"connect":2,"send":0,"wait":5,"receive":4,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1429398284425.js?dev=e\u0026fstu=019f06cf-73f5-72dc-976c-0a4cf7941b81\u0026key=56e449b9fba1f2653c8cfe7b49394087\u0026kw=%5B%22roblox%22%2C%22robux%22%5D\u0026ps1=1782525686\u0026rb=\u0026refer=https%3A%2F%2Fevicgame232.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=eT9wjJRNAhoeOYQgXsHFJh2bF5htbeXVHNMei4M6fJ4\u0026shv=2\u0026st1=b573a6e0cf304681f66b7e2e18a0a138\u0026tz=0\u0026uuid=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:26.838Z","timestamp":1782525686838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 00:47:49 GMT","end":"Tue, 22 Sep 2026 00:47:48 GMT"},"fingerprint":{"sha1":"87:48:80:BE:9E:7C:E0:59:6E:4B:D8:8B:51:FD:61:A4:77:BD:92:86","sha256":"67:18:E9:1C:95:CB:61:84:4D:60:01:1C:16:48:37:7B:2E:C8:F8:D8:5E:D6:45:88:45:39:0F:23:D7:70:A9:12"}}},"request":{"raw":"GET /watch.1429398284425.js?dev=e\u0026fstu=019f06cf-73f5-72dc-976c-0a4cf7941b81\u0026key=56e449b9fba1f2653c8cfe7b49394087\u0026kw=%5B%22roblox%22%2C%22robux%22%5D\u0026ps1=1782525686\u0026rb=\u0026refer=https%3A%2F%2Fevicgame232.blogspot.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=eT9wjJRNAhoeOYQgXsHFJh2bF5htbeXVHNMei4M6fJ4\u0026shv=2\u0026st1=b573a6e0cf304681f66b7e2e18a0a138\u0026tz=0\u0026uuid=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://evicgame232.blogspot.com\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.a98y-YD-T0WvnsCZ8AF7gVqNWuwo94AFKa9olL5vEJY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sat, 27 Jun 2026 02:01:26 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://evicgame232.blogspot.com\r\ncontent-encoding: zstd\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nset-cookie: uid_id2=10ff9e91-d9f7-4b25-8e57-1b6a1fe5d4c6:2:1; Path=/; Expires=Sat, 04 Jul 2026 02:01:26 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Sun, 28 Jun 2026 02:01:26 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Sun, 28 Jun 2026 02:01:26 GMT; Secure; SameSite=None\npdhtkv27=true; Path=/; Expires=Sun, 28 Jun 2026 02:01:26 GMT; Secure; SameSite=None\nuncs27=1; Path=/; Expires=Sun, 28 Jun 2026 02:01:26 GMT; Secure; SameSite=None\nu_pl29788165=1; Path=/; Expires=Sun, 28 Jun 2026 02:01:26 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 27\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 55b32235d16d26a32e0d37a50a67f98d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4730,"size_decoded":4711,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3854)","md5":"e54c65cc3df0fc2709c31fe2eb8162cf","sha1":"9321914022f38020da11b9a1a1a48f01a7bcd593","sha256":"43d10edcdcdb0a2539f2c6cd396221d1194ff73df859784b80a96edab668b42e","sha512":"a0b7a7a4a11c484415c3910a301ef564b53e8c6f29e7f3d0ce7482712d840fa99dc2da06e6b2dd1adbd2297c2a16574ba6d93f309b8e98b83f0567232ee95272","ssdeep":"96:sASEytwPTtozaadKv5BxJljB/k/wXeWYyr8Lp7rv11ZD6CfMEDaH:rS3wb6zmB7/kYXnrkpHvV6CkCaH","tlshash":"92a15bbbdd9a169c1642e06b5279bb082c11862fb104fd0bb8cdcb7a0f54b94197ace5","first_seen":"2026-06-27T02:01:54.422858Z","last_seen":"2026-06-27T02:01:54.422858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04XSYS3QGH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://evicgame232.blogspot.com/","date":"2026-06-27T02:01:25.605Z","timestamp":1782525685605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtag/js?id=G-04XSYS3QGH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://evicgame232.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Jun 2026 02:01:25 GMT\r\nexpires: Sat, 27 Jun 2026 02:01:25 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163940\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482576,"size_decoded":164544,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"4db7b165b8b5fc20482b40252f17e9bc","sha1":"498024b9957fe7c0dfc2688782c166a5a1ad7097","sha256":"5b5d88344b7c75d35b321033728193a7ebb16fbfc95c6545be05fb41105445b0","sha512":"a7f1084539463f3f7cbf5dc9e6bc9d5492a14b72a96f51d56c2968b30307ed63631854dc26521fbe5d24295999e10d30302ff038f91b76e2f8e24b378325660a","ssdeep":"6144:rn5gax/0k289wFxe5VniPfHvpuY+SiAI/R+lwQjn1AJnnhyz:75g82mse5ifWdQjn8kz","tlshash":"9fa408cdb3d674625396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-06-27T02:01:54.424017Z","last_seen":"2026-06-27T02:01:54.424017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":79,"receive":121,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}