{"report_id":"c1289068-8d60-444a-ad45-3edfebbaafc6","version":0,"status":"done","tags":[],"date":"2026-10-09T16:58:18Z","url":{"schema":"http","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"title":"Amazon Casino","dom":{"size":36524,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4816)","md5":"3c46727ea4c4ea3ce44974513a698e5e","sha1":"92e7fd84296426a01f3d47d35d3f6a08ab1a9417","sha256":"8a4d6f66c3070ff3ee29a1f95fe4afa181f23e6b31cde53db5247fbc5c1c0556","sha512":"c2b146c47ffd09747e80f7655cfbf7160497072233859cf815307c5df688a6c9a306e2ed93d3d6083100ae8e96332ae5858f8d550f748634e9b85db446b31610","ssdeep":"768:wJJrHMoNrWVpecATblb2DqddzKJ060ct5Uvf2oZPD3cp:2zKVpecATblb2Wk0a5UH2oZPD3M","tlshash":"5bf2c92251dd207b1123e0c6d4097b0a39e681bfbb5b835732ec2e7d7fd6834a626794","dom_hash":"domhash59abf0d2cc38b312f07c240e4d5964ca","first_seen":"2026-10-09T01:49:58.325831Z","last_seen":"2026-10-09T16:58:20.325052Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:58:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"win.apps-play.store","ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2026-09-18","domain_rank":0,"first_seen":"2026-10-08T03:55:49.482362Z","last_seen":"2026-10-08T03:55:49.482362Z","alert_count":42,"request_count":14,"received_data":675005,"sent_data":7459,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Python:3.12.3","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"627687419ebc137ae1c41f651c43744b","sha1":"8abc50a12b9ecd428a141239d86b35e626f47869","sha256":"0476342a94bb02ea58c184218ec35cc0f470983158b87af0be868ecbecb4be88","sha512":"d57fde1426162a301d60856011646f919fe1abab6d1ab5c0fa16f3ee65362c0a85b6d1ad0fd62e3a61cc8da31c4edfacbf63ff0ba5daa90ef7c627c938e34728","ssdeep":"","tlshash":"52f0ab3c8a50307752b3c0daa1ae72d37e2b10ade036e224637ed2506c90d0d38a64d5","size":441,"data":"","first_seen":"2026-10-08T03:55:52.966675Z","last_seen":"2026-10-09T16:58:20.358184Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0d0ba3b2b8b68e6a5a85683d2e3f16a","sha1":"650dbe976d5a5f9d226f1e967a9a23081d53209b","sha256":"5652e648a474963068246ff0645aaeac7d946372341f072b6e67a25dec40fe4f","sha512":"59631fe308c67a0d2ab807e1a2e7ef78aca92b9ec76949009d432b7c22208c7d0f0d3cecca148cd03bf7b0087df2b309c459670cd33c8891ef45d5627db2e5a7","ssdeep":"384:XMpn0jr6dB3wObmeqBH0bG0KU+t5qkiEyvf2oUpEruiZW2Seco:xqddzKJ060ct5Uvf2oZPD3co","tlshash":"5292245151ed11ab0211b057c8097e093def45ff3b9ac357269c2d7e7fe2134822a799","size":20911,"data":"","first_seen":"2026-10-08T03:55:52.968001Z","last_seen":"2026-10-09T16:58:20.359372Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/pic-047.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.623Z","timestamp":1791565069623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/pic-047.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlda34m1hvc75tk\"\r\nlast-modified: Sat, 12 Sep 2026 10:50:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 7544\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":7544,"size_decoded":7860,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 192x192, components 3","md5":"5709824d7a1641533a70e81108b8b789","sha1":"060666fe02fca0091ea0cc8102d5b7f27dbdbe71","sha256":"743fd4d234ad4f843d77800138c60b84325c6e1eceab8f1488d55d8e5e09d764","sha512":"8cf52b8343da65d9156369a70b446023433c297a306b7010202cac541c517c5be69637770bc3ee38cf8b0e4ffd5e44bb53ccf9b81d821d6ae02da4188b441aed","ssdeep":"96:FxrG6WntlpbNZT+nfJCsgN/al9+h1AD3q5BTU1qhNf0Ll85kEAY1VpKa0Y9ic7hM:X3Wntrj+nA0+h1A+ZhN6O5n1HY1B","tlshash":"2af1af82c93d5301ed8aa0758f9f9960937f7689ea002ff6dbc0416e767da14488cbcc","first_seen":"2026-10-08T03:55:52.946584Z","last_seen":"2026-10-09T16:58:20.328131Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/icon-192.png","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.780Z","timestamp":1791565069780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /icon-192.png HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/png\r\netag: \"dlxljmlpnvc39f4\"\r\nlast-modified: Tue, 06 Oct 2026 08:02:17 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 12208\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":12208,"size_decoded":12524,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"7bd49f7efb79a5215e8b56bc1253f1e9","sha1":"cd43ed563dd403d9a30cc2448abdd3916b4e9a44","sha256":"ad8f923241f0ab26f540c669cfe95902752521989a364d5085cd2b7558a8350e","sha512":"559e37182fe103d55a9e4e078ec2446e5e7d5b65d64b7dfd80419636ff8a68cfccaa4ad312774c442b833b27c953dea97becaf8914ae084413b39325e8aa4186","ssdeep":"192:YAcvrpWLx29a8YSy/oZAKurOuJ84AR6rFm6jEsu5SUBGlcZF8I2yYTHEJo1ks:Q1W58s/o+JGR2Rjs4lchuH3ks","tlshash":"b342bfdaa8f5b4b0978103cb6599016d6facf87619223e4ba84d7d9300bcf5e47291b1","first_seen":"2026-10-08T03:55:52.959833Z","last_seen":"2026-10-09T16:58:20.334384Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/api/traffic/pwa-prompt","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:52.758Z","timestamp":1791565072758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"POST /api/traffic/pwa-prompt HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 64\r\nReferer: https://win.apps-play.store/\r\nOrigin: https://win.apps-play.store\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"slug\":\"amazon-casino-22\",\"token\":\"pV5x5YA28cnW7hD4\",\"ready\":0}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 09 Oct 2026 16:57:52 GMT\r\nserver: cimo-traffic-control Python/3.12.3\r\nvia: 1.0 Caddy\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python:3.12.3","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":12,"size_decoded":301,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb50bf98d7d4137b4b4604ae138bc57c","sha1":"9463df0cbfa20eb19a5b7d1fa0b99cf9a0cbf56f","sha256":"6bc0da1f42f96fc37b8bd7ed20ba57606d2a0da5cda2b135c7854fbdc985b8a3","sha512":"2542cb2f0ea107d99cc508b0ff285a62abecce6c8d60ade65003605eadd30a3389926de638b4e895cfd46756be769ba125e60a4c2f51707d1bf18e61dde4b612","ssdeep":"","tlshash":"f8600003000c0030003000000300f0300033c0000000003c0003f000030033c0000c00","first_seen":"2023-04-10T06:46:58Z","last_seen":"2026-10-11T11:36:01.326153Z","times_seen":1264,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/api/traffic/pwa-view","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.614Z","timestamp":1791565069614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"POST /api/traffic/pwa-view HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://win.apps-play.store/\r\nContent-Type: application/json\r\nContent-Length: 69\r\nOrigin: https://win.apps-play.store\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"slug\":\"amazon-casino-22\",\"marks\":{},\"prev\":\"\",\"lang\":\"en\",\"esc\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nserver: cimo-traffic-control Python/3.12.3\r\nvia: 1.0 Caddy\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python:3.12.3","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":43,"size_decoded":332,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57077ae76dd8f7c6dff3feeae4124d20","sha1":"c0a8c5f99cddcb2cca69960b4d6a855d4063614b","sha256":"0afb172b0476a2e673c5aa7d93911695762ded792bdb30b9017187dd11000f0e","sha512":"f10afb7dc0b9176e2f554f40469f0d38c6e28a6154be44d0accb25efad3a4d1dac61fda6ec57c38a9eebc66077b759d08e0b845e842134d93bee4d81ac7e6362","ssdeep":"","tlshash":"be900454055571c301c3045d0c747d17404107c4040d50c4077055c0044c5f417171c5","first_seen":"2026-10-09T16:58:20.33896Z","last_seen":"2026-10-09T16:58:20.33896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/pic-024.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.617Z","timestamp":1791565069617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/pic-024.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlda34kpv5uj33v\"\r\nlast-modified: Sat, 12 Sep 2026 10:50:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 4027\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":4027,"size_decoded":4343,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 192x192, components 3","md5":"5d6b94bdb084981de13c6213b71b0d33","sha1":"291d1f273e40a700a5e49f47d998fabb08492e1d","sha256":"3b1f3268607a53413f50b1e5a5061128c04ebe8acaf9d12f21e6c4b06f3af200","sha512":"71cd332b454c44e9321ccdae27139230b10bf0557adbe14b12a8a5cd26b24cf39a785f711bf5da297831a324261ef074f1adea68214d05bb8022475f63ac3862","ssdeep":"","tlshash":"1c817cb5b7b98d78de5f9136a07e205a064e7000a1a14b96b0ec7081fa762f557f8a88","first_seen":"2026-10-08T03:55:52.963527Z","last_seen":"2026-10-09T16:58:20.344306Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/ava-098.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.622Z","timestamp":1791565069622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/ava-098.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlbo02nw7vyd5ge\"\r\nlast-modified: Thu, 10 Sep 2026 13:19:09 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 7070\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":7070,"size_decoded":7386,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc60.31.102\", baseline, precision 8, 192x192, components 3","md5":"0d1e0964a320ecddb311b058db0171e7","sha1":"88ac466cee69266a0a00a9d39eff3cdd34e5628a","sha256":"6dc2472ec783501d3e65040e5b53a91e5f7a6c297fb74c881f08645800701335","sha512":"75e241931ec72a83de6916041ee7af93cd498de5e656b00f33a1337ea02d067a15cc91be1bfd7951824a32983453c0c06684ee836c67a5e6e50d063b1f542e35","ssdeep":"96:o90H8R61pMS/XAVr6HvSNZFHxuHww+rU3Vga38yqqSkLhzd1J4wrd1MR/TxUh1zf:g0cRe/XfvSNpuHww+dasqSkpRDEWhcq9","tlshash":"82e1ae2a33b97681d2ecca7f369047601f9cbb44dbe04df8c38a55e1a27c90056de466","first_seen":"2026-10-08T03:55:52.964912Z","last_seen":"2026-10-09T16:58:20.345635Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/pic-036.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.624Z","timestamp":1791565069624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/pic-036.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlda34ld32z374i\"\r\nlast-modified: Sat, 12 Sep 2026 10:50:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 9234\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":9234,"size_decoded":9550,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 192x192, components 3","md5":"d9c2a2b6d8f82ea3e3e2566d95f371df","sha1":"917af2f1f8c85fdd78c6f0f1d5046891b6d5ce67","sha256":"a168aed81bc5a753643b53c5ad8ccc64e5cd586382413205926242b8d71a9273","sha512":"601f4b004ea056a886eb6c5bb1fdda8da42fbdac5d660d2f700de4f54c1e7c6af9812a8d7eb3d9394076548b3369be1e87d9427968eb1ccb3dd5b8008d307266","ssdeep":"192:t2RO81eg0z5SpBq0Vc24I2bFaPcf/Asl9bC9lTul12k8yb0uZovU:t2Y8op5eqw6I2bIP9MGMtwuMU","tlshash":"2f12b0988e5e518d175f0427ce7067d20ab1be8ef22e4a71d86914933acb3c1d74f04d","first_seen":"2026-10-08T03:55:52.948133Z","last_seen":"2026-10-09T16:58:20.346664Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/pic-018.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.625Z","timestamp":1791565069625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/pic-018.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlda34kc66mb4ie\"\r\nlast-modified: Sat, 12 Sep 2026 10:50:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 5846\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":5846,"size_decoded":6162,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 192x192, components 3","md5":"454c64ace6a6aa2034d2a5622cef3420","sha1":"4e73be193ecbcc9244da12ace9d4591a9ba54623","sha256":"606be20369c26d773c62b710d4ae039951121982e35286c8ba9a392560f7166b","sha512":"6b0135677cfa3b416198b55b88514ee7e3fd33598e6dbb2b23c2859e0cb8bedea383eefd56a43793cbb3be698e1b4bd0711d5623b1ca66f729604098b6400b61","ssdeep":"96:zDqtCRvf6VYGDImx6CT/L4h7qd7DE0ssAhde3LOzlZK7DBL7y:iksYG8mx60Cqfao3gQ7R2","tlshash":"7ac18e1af9dce9ddc7d818b3439acc974ac998590b01795174c790e81387cfa8f3e822","first_seen":"2026-10-08T03:55:52.949779Z","last_seen":"2026-10-09T16:58:20.347791Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/unknown-51-1791267985.webp","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.666Z","timestamp":1791565069666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/unknown-51-1791267985.webp HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dlxji8ilik5a2j6y\"\r\nlast-modified: Tue, 06 Oct 2026 06:26:25 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 118186\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":118186,"size_decoded":118505,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 941x1672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a14eeafc5f7b672b4d0d3e628d064e4","sha1":"b64b74cf0f24c1f5c0a662262b9351c34662784f","sha256":"a12fe7d9ecb4eb33e815c129e202ab49ccdb74da44be71ceaabd0af83422b34c","sha512":"3bd08223b09aad91ea0a3fc914cca4b44daa6e4edfbf3484730e68e011fa5a736fbde9a256fba9f0e22c49ecba89cdd1ac13feca0f8e876f962fbb827711f6c0","ssdeep":"3072:XGF6qtgnW6XqYb+ShgVN0/seEDTyl1ltqglbbKBcQL:2oygW6aUV1sFylh9bC","tlshash":"13c312e3edf398e164e862897737bf87c9bd65332c016394b702688d2d83998789d341","first_seen":"2026-10-08T03:55:52.951221Z","last_seen":"2026-10-09T16:58:20.348566Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/unknown-48-1-1791271360.webp","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.668Z","timestamp":1791565069668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/unknown-48-1-1791271360.webp HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dlxkpalrdtxq52cg\"\r\nlast-modified: Tue, 06 Oct 2026 07:22:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 236320\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":236320,"size_decoded":236639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 941x1672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43031b21088de50393fdc98586fd17db","sha1":"b9ae8abfe7c7f1a3d55cacaf062ff771c872c39f","sha256":"fa4406fea9fb4b65e62ecb9fa06596c8c238b1240a4a5785ee04e53eca3fa6f6","sha512":"9da490c9819c5568d0ccd823bae62182594042c51834d07974fbaf7fdfcb4520dfddcbfba5bc00ac67250327e74a8f9138e65ea4558f088f34d3c277ad2e1665","ssdeep":"6144:gbrU9OBQtp9BkZVBGalH0ZxO9NntVHTSTD2cWQdM0cnrxEXwI:ErUkA9urwHWNXH+TDh5dM0wxEXF","tlshash":"773423cd925495266db3b3356fcca74f122d0a0336ae14486dac74d457a7ff00aba0bb","first_seen":"2026-10-08T03:55:52.957099Z","last_seen":"2026-10-09T16:58:20.35144Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/unknown-47-1791267960.webp","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.673Z","timestamp":1791565069673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/unknown-47-1791267960.webp HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dlxjhx02vys54f6o\"\r\nlast-modified: Tue, 06 Oct 2026 06:26:00 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 206304\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":206304,"size_decoded":206623,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 941x1672, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7e6381f33e05851591680605b4c5127","sha1":"2b3f9dd105d5de015e2c606ccfb7a0d521e689fa","sha256":"9fe7e1f67a2fe797c2866d1587ca6ece61c953ea4d45a0acc8b1190afd2f8b67","sha512":"8e4523095f41190df31947bea900b68f319ef6449baa0c0007d6eca4cbaf148449e463b78d5bd631763ed2649441b9d1546d2c422ad64dbf34906a9bc6fc7bda","ssdeep":"6144:xvqbgALwE7+apLr4ldfQwHjQBDNZwrl78SkU:xuhpLKQwDWDrG70U","tlshash":"591423dc2527a1861c40a978433940fee8fb735a32096fe7e951fb590c0da099f0a93f","first_seen":"2026-10-08T03:55:52.958655Z","last_seen":"2026-10-09T16:58:20.352248Z","times_seen":6,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:57:49.241Z","timestamp":1791565069241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\netag: \"dlxljmoknwhhs8m-zstd\"\r\nlast-modified: Tue, 06 Oct 2026 08:02:17 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":36598,"size_decoded":13759,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4864)","md5":"aba2a51fb74bf334bebd4dbedeb8b91a","sha1":"eb09d67f4805f30e36930b31854b5595affa4386","sha256":"302c2453f0b4e31bc6b0b1d9e72a0bdbbf4b94fa1dd966db37ad89187b6306ed","sha512":"2ccee267932072ad3be4cf5f83a4f0648ea55a7e011603afbbdfcbb03bf879545f5a4d9fb9acd0d8f8a7d4e591fcdb4e18cf5a5651d17da54c8f810fc503c7e3","ssdeep":"768:0JJrHMoNrWVRxMMdq4fuLqddzKJ060ct5Uvf2oZPD3cp:SzKVRxMMdq4fuOk0a5UH2oZPD3M","tlshash":"53f2c92251ed207b1123e0c6d4097b0a39e681bfbb5b831732ec2e7d7fd68349626755","first_seen":"2026-10-08T03:55:52.952868Z","last_seen":"2026-10-09T16:58:20.352982Z","times_seen":6,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":12,"connect":30,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/unknown-24-1791267940.webp","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.616Z","timestamp":1791565069616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/unknown-24-1791267940.webp HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dlxjhnrk5q71cje\"\r\nlast-modified: Tue, 06 Oct 2026 06:25:40 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 16250\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":16250,"size_decoded":16567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6588d0ab803b06f187ef9730faa6abe","sha1":"b44dbc597cbc774dcecb7b952bf1c564e224a36f","sha256":"75ff1f19911d6ff96d8479753bba790dfe6509cc30c4fb824f6fcd8dba3d394d","sha512":"35fc07b3d245a32d6839aa5b09068ba3c5031f9fa4659a66632c79ae261532a0085ee6b45bb6b41317dbf6c8bbf1fe677a51ad6ee9963cae13237be30087492d","ssdeep":"384:ZOFYMPMntl0yoWP2gyUYrVPFxofjr5u1oe8ojDdJ4h6tuzOw4okz151qt:ZkYMkj5fegoVPWY1Wovt1wDEv1qt","tlshash":"4372bfb292aed2b4faa6db71145c73c665941c2980c7172e046a281313e67ff7f39c5c","first_seen":"2026-10-08T03:55:52.954374Z","last_seen":"2026-10-09T16:58:20.35383Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"win.apps-play.store/botflow/up/ava/pic-027.jpg","fqdn":"win.apps-play.store","domain":"apps-play.store","tld":"store"},"ip":{"addr":"164.92.200.122","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://win.apps-play.store/","date":"2026-10-09T16:57:49.620Z","timestamp":1791565069620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"win.apps-play.store","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Oct 2026 05:10:53 GMT","end":"Mon, 04 Jan 2027 05:10:52 GMT"},"fingerprint":{"sha1":"12:4F:2F:DE:54:9C:ED:CE:9E:45:7C:F1:94:57:04:53:E9:38:14:80","sha256":"97:BE:92:54:73:2F:0C:94:22:5D:30:2E:90:6F:B4:98:AA:E6:0F:D7:9E:59:44:50:A4:64:14:DF:4B:F2:FB:0F"}}},"request":{"raw":"GET /botflow/up/ava/pic-027.jpg HTTP/1.1\r\nHost: win.apps-play.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://win.apps-play.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/jpeg\r\netag: \"dlda34kvti198h3\"\r\nlast-modified: Sat, 12 Sep 2026 10:50:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 10983\r\ndate: Fri, 09 Oct 2026 16:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":10983,"size_decoded":11300,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 192x192, components 3","md5":"0bfab9e5ffb30be253732fa5ee18ed9b","sha1":"664b46d718be5d35738ed111c40270fb62cf0d6f","sha256":"2d0bfc9a677a677e2234b1099bbde38cfc820ef0354696c4808accd51354d26c","sha512":"2399bdced529694b801c596acdbf5601db282a10f523b7d0a031cda5b4a4e9997f11c4956d0ec87a7b61b5ac16e414abc54afcdf4d2a46a12f674065f6251622","ssdeep":"192:gZ74b3DoQ1CofrcCQOoK6OytdgKwG6ddDUdzjOgCEa9fiDg9Or4:gZNqhQTK6Oyt2KOIxCEa9fimr","tlshash":"d932d1e512fbc3a5e6794766ece0614f79b37336d009d548325b42ba3216c390da1170","first_seen":"2026-10-08T03:55:52.955678Z","last_seen":"2026-10-09T16:58:20.356458Z","times_seen":6,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"win.apps-play.store","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"win.apps-play.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}