{"report_id":"c9720a3f-2c63-482d-8e0f-8cb8f652f40d","version":0,"status":"done","tags":[],"date":"2026-08-11T23:30:19Z","url":{"schema":"https","addr":"drgmoney26.com/","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"drgmoney26.com/","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"title":"Драгон Мани: играть в онлайн казино | Dragon Money","dom":{"size":353345,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61611)","md5":"3b5b691396e1a113d7b5fade3ff8b6f7","sha1":"9a3c0dd6d8051275036f711205f74ad86fbd992a","sha256":"2cb96b200721224b2861cba80bb897a00e26728e17f53649bda9205848c737c3","sha512":"68c9e34403e1b2f97e23d26e80902687221593882848890134995b9eb1ecbad12325a54ff2fba5d9e12f6ecff835ecabb1e7cd845e1ddca81a64600ea19cad96","ssdeep":"3072:tGlgvFywoLZqfn3+tgU3XRe/SWf6s6yZZH8oq:tG2vFywoLAf3+tv3W6hh","tlshash":"c9745cf0a2a0e2a8d967cb6572e9759d603df8badb1385ccf15c46404bc3af742c1b58","dom_hash":"domhash8e6ecb0e44c4fcf19b5083954a9ee7b7","first_seen":"2026-08-11T23:29:45.376432Z","last_seen":"2026-08-11T23:31:27.214963Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"drgmoney26.com/","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T23:30:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jivo.ru","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-03-27","domain_rank":437705,"first_seen":"2022-03-30T15:10:58Z","last_seen":"2026-08-10T12:56:47.844081Z","alert_count":0,"request_count":2,"received_data":23909,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.drgmoney26.com","ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-11T23:26:47.59493Z","last_seen":"2026-08-11T23:26:47.59493Z","alert_count":19,"request_count":19,"received_data":192323,"sent_data":10967,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"drgmoney26.com","ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-11T23:26:47.592107Z","last_seen":"2026-08-11T23:26:47.592107Z","alert_count":44,"request_count":44,"received_data":13722588,"sent_data":22678,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":5,"received_data":208545,"sent_data":2705,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":1,"received_data":510598,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WXWZLCS9JJ\u0026cx=c\u0026gtm=4e66a1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f49cc795f8b71f73876fcc1558975d7","sha1":"b00974cc0e0ba76f213fdf2e37fb38e07f506a2c","sha256":"bc9ce92f056cdb32c65997ae3cca00a26c82afb7b777fc4ee3ab14ddc04c2a58","sha512":"86b96c7f1eb8c018a094bba85f0631d31d359e9a9b497cb91d364ca71a4672457173dbc99ef123ee5f89d95456d6be70c4b10608cbc59f4cfb59e6c634a13735","ssdeep":"6144:XSGbjzqjU/Qu8mLaW3IuNcad5JdEQJ3iDN1jpjU4Oet8:iGPAU/p8I3M19U4OH","tlshash":"99b4e8ceb3d674265396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","size":509994,"data":"","first_seen":"2026-08-11T23:26:53.664489Z","last_seen":"2026-08-12T01:21:00.18966Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-KILJWEBW.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f44868d3c7bb28794187c5a128801e","sha1":"c61829307f8fe43e3302f74876b0f3f5027002ef","sha256":"11bfe2ff9f724b1a1244a31d684fc5db06402650c1f368976cb3a0f965a251be","sha512":"7df25d253e857671e17c0a7084440f50c6a7052a9ed249b1456c1ca68516834a4a03c262f8654e1df2389fce1a1ef56454ae3fb406a9ef69c621614d26df518b","ssdeep":"12288:sMyq4p65MYMccZrEXNWBTiffu/bowCXJCu4hOm:sMyq4p6SYMcwrEXNWBTiffu/bowCXJCx","tlshash":"7ae42bd87302b03257ae50a880b60207f7f95c854409446df6fcddee6aaec4962bbf75","size":665478,"data":"","first_seen":"2026-07-28T11:27:58.643208Z","last_seen":"2026-08-12T01:21:00.18097Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-YKB4XSHV.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"0ccfb4a5bdbb48a64d336fd154a393bb","sha1":"dd05cdf49594f3e42d3587c7af9e305fa59a50b7","sha256":"b1b8518e18dd9e5e4db0ec528cea9d85d9868cabbcd8b7e90606d46be3b465d9","sha512":"89a6a4bd69bd5ff4d0d05068617d3bf8451f4d47596c51a5fe999ecb1ee8e328f6fe16490f36867e21625a093d7e01e79a30da86d19c50ecd915d8aa6e5a44e3","ssdeep":"","tlshash":"f9b012522800a37001478cd1c024f3011522894383e483f001cc0a9442350c2579f857","size":94,"data":"","first_seen":"2026-07-28T11:27:58.625762Z","last_seen":"2026-08-12T01:21:00.198699Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/xX8HI0a7SA","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fec51e4452661b8f9ef44da70093482f","sha1":"89909bad82f25d23b08c7f59da361d749195f612","sha256":"3eac18ac3e62d255f7239607b69d56b4edd10976ee000bc68033d20deef91d0f","sha512":"dca9ad3bd7bb803879d7b7fce90beb16fb07bd3321755eab8477fa0e8a4c0b9893549a304c4d94256d2751f28438f2b97d73a3f2d760835288d8fa1b55e25f16","ssdeep":"384:bofeJNQCuFmbLm0WrA8zuyEQ+EgQXDR9iqJISO9JHW8r08wI+xcXd4:bFJWA8z5EQ+EbXDr6/rp+xcXd4","tlshash":"c4821b6e7959b97383b10cf9a15f6206733549ebd404cc20a405f9897db8ade813fee8","size":18483,"data":"","first_seen":"2026-08-11T16:14:11.423241Z","last_seen":"2026-08-12T02:00:50.624425Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-NWHN5MI7.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fd4f27d191d910d58e2f1396b5fa244","sha1":"5a914ca3962ac7d1b34e11bc54db032c3fd535d0","sha256":"f9d0a49cbaa7e0ef71068b9f75762ea2a1859b1fd1cd271568300f7712c09677","sha512":"ab99ab4efde6328974db626147b97d26c762946c62aa5291618c91a3bb9a2ef44233e92e390378f1a700e8e379a45a4612342ccf1e1cf5eaca1d22d808a874ba","ssdeep":"12288:WpT3/sqv3iU3vFyLk3ikiAIAUCftQtRxT:WpTvsqqU3vFyHAIRL","tlshash":"3855f6d0d133583ca6ea7112f2793c8d25187842d909c36efe7c9d97e2c4a8493a67bd","size":1392587,"data":"","first_seen":"2026-07-28T11:27:58.676534Z","last_seen":"2026-08-12T01:21:00.251848Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/polyfills-TTQONNZL.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3344d2aa4d02094c112e3f45f4eeff52","sha1":"d548b8a63fd91acc01d85d44db7898f2c645ac37","sha256":"64972c117699f396eb5ea760c504708d1640b161764c01527924d8e49b91313b","sha512":"2dce7654ca213606f2d932138d88dfd23ccdba496ae01a213329c5ee70518a4bad42d1ac5120b5e7a919567705a5c79071869a927467c300971a8e521c7b84fa","ssdeep":"384:3m6aC1NwlMBw6sMRPjb+e3yGYjgP3NiIzvv5IwrUAsT7oVaG0wl+Z44M/AAuASEf:3naC1OlMyjaN3NiINxrUAsTclZvzL","tlshash":"bbf2d5e97752f0a6c7fe517181bf8007e73664e0288c08adf54d95ea283605896f6f3e","size":35491,"data":"","first_seen":"2026-02-14T08:27:01.087079Z","last_seen":"2026-08-12T02:00:50.652174Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/main-D7IE7QPY.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d2e10c4efbfbe44fb1faf5b4de0ff35","sha1":"5b3f10f182a0bd69ff489369efe12233688e261e","sha256":"ecf3f760743ab34a6c9b00987d40c3d6d778104b409d9f5923619b1aa50b94ed","sha512":"0ccd2b9c1368323e9d2da775e832f16db9828b7e387a8e48971d326e707b3e02d510a4e7fc7ce5a5ed8b522316929f43ae658b10754e048026b6ac613e19cea5","ssdeep":"6144:JG5dBr787OU9aUJGLuCDRG0ili9proSFGHnCc+G0+u:JYr787OUN019oLs9","tlshash":"ef4409992311757683ef129a92b54141b3b54884b80e886cb4e98cefa5bcc5813ffff5","size":272192,"data":"","first_seen":"2026-07-28T11:27:58.666854Z","last_seen":"2026-08-12T01:21:00.187957Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-08-12T03:38:48.504233Z","times_seen":350846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"[Pixel] No pixel in domain/info, PageView skipped","filename":"https://drgmoney26.com/chunk-NWHN5MI7.js","line_number":1,"column_number":220110}]},"http":[{"url":{"schema":"https","addr":"code.jivo.ru/script/widget/config/xX8HI0a7SA","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.424Z","timestamp":1786490986424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"HARICA DV TLS RSA","organization":"Hellenic Academic and Research Institutions CA"},"validity":{"start":"Wed, 22 Jul 2026 19:53:43 GMT","end":"Sat, 06 Feb 2027 19:53:42 GMT"},"fingerprint":{"sha1":"75:CC:3F:51:84:E1:7A:A6:2B:47:8E:1F:28:78:E9:35:EB:0B:56:6A","sha256":"A2:CC:68:62:C9:10:2D:0C:12:C4:CE:A8:05:CC:80:12:6A:AC:D4:4E:52:3C:77:A9:E9:51:01:8C:00:9F:7B:4A"}}},"request":{"raw":"GET /script/widget/config/xX8HI0a7SA HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1635\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Wed, 12 Aug 2026 01:10:40 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2026-08-11T23:10:40+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4484,"size_decoded":2080,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"ec6865b75edba458c1bcd369edb3f654","sha1":"7b3d5b404c9b7e2078a6e800c0a9ddf9202bbfa6","sha256":"f3a473afe3e78a67b4a82f1d8087c9c1c24cd2e1447d37688415c07904efa63b","sha512":"455f228e795c94a2f40de9519be10ce0b7ffb3ee09d4597b81e5b1dc05f11da17b6860cc1e6791223cffa813a195514ad7297892183f8c03117e508d885a1c1c","ssdeep":"96:/AkvoOqhQX+RV6lKkaByiwMamSEBIfDcCaCuLlh8:/AgZqB6lqiFfDcVDLg","tlshash":"4691def298d9096e18897582f7b37c8e30e82a56d744cf3bcd3e192fe506210234371a","first_seen":"2026-08-11T23:24:22.256521Z","last_seen":"2026-08-12T01:21:00.193089Z","times_seen":57,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":69,"send":0,"wait":69,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.992Z","timestamp":1786490987992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:14 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4944,"size_decoded":1087,"mime_type":"application/json","magic":"JSON text data","md5":"404c7bfc4e6c8d6d7b26e7aa10d91ae3","sha1":"90dbd99a3e8e07a4329f05fbe2d46cd093bc941a","sha256":"140e38bcb50c89a2488572a000785b69d59ba9782bd4d63e7fcf6c3e6694d0ef","sha512":"05ddbb4dd9b50899e71ac7498abc6ee0162f6a6b93c3aedb23f70138d8107d31f3c686ad81369249d0429565fcb91b3f970c80356ce6e7bb8d8b647a959351cb","ssdeep":"48:YBJS77fOsQO3WEfykim3ZGM/olvEE/Eeh:Gi7fOsQOp6M3ZTyJ","tlshash":"2aa1486b47282cfeca0f15f51fb33e4a909e0186dac5ee6504c9cd5c89fcaf6651a022","first_seen":"2026-08-11T23:30:21.45306Z","last_seen":"2026-08-11T23:31:29.280168Z","times_seen":8,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/en.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.042Z","timestamp":1786490988042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/en.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-2214\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8724,"size_decoded":1653,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4a7becab4117324746cae1e2b0aebdd","sha1":"c51b5d33d80fe0811428a187f4f6af54e7eb4a0f","sha256":"2c313bb7d5c2016cb14e98acc071802c42d75ab79ebee98eb4c370bea471ab6b","sha512":"66283fac03a9ae552796300517bab0b3b5389a8c79f0a482058f203d8572319057ec5cd20c28aa2802c2092d034d2124e770cd55c07193a800c1ff4b80ad5a8a","ssdeep":"96:Yu/aWOTGc9v6f5QZQZsJfGGzV437+aO4Mk/N+h57uWh6gnHKSlxE1zZ10oc:hy+c9k5QZGmVW0hgWh6hSl+111Tc","tlshash":"670279d6677c21c8ea40db79532c71287178a0fcbf9209f0d2879a88e4b0ae7dd55de1","first_seen":"2026-07-28T11:27:58.665078Z","last_seen":"2026-08-12T01:21:00.2005Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/it.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.047Z","timestamp":1786490988047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/it.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-10f\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271,"size_decoded":401,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fda986e34c24fe45dd70a8b2b25fa3f","sha1":"0a57669ad956bdb68d7bc981f95c2c3931456a78","sha256":"3da165062897e4b66ac37bcca47a7abd0c279fca81d829d4eb55c3a560558277","sha512":"5c1b84e6737ed3be72ca62d70dfb06514dbcd7889757d913b93c87f4fd00395c9366040b4bf3963a537ea9ab4cc755d5175a00a76a1f95fbe762d3a714bbea51","ssdeep":"","tlshash":"14d05e60d98c9a08cb005717822c78b93013aac4937e0021fac47f91f0088cfbc6a79d","first_seen":"2026-07-28T11:27:58.669618Z","last_seen":"2026-08-12T01:21:00.224713Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/category?lang=en\u0026pr=dragon","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.994Z","timestamp":1786490987994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/category?lang=en\u0026pr=dragon HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/images/logo.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.870Z","timestamp":1786490985870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-1fc7a\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130170,"size_decoded":44825,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6294d03736112351e14c5408d9b2704a","sha1":"25824fc4ab5afcf65b304d65f87c2e249c70e650","sha256":"41dfd3442bcb1cc754a6db19b8e67967933faf99d46dc777cce712b45e4bb617","sha512":"89e3b54096dd37eefea39a81bea547b3a2f83b9a189b7c240b9b1d92d9e45a2e75a549c7a52dc1030d210a10b3ff41ebd8cfa9a52b8968c4f2c1881723728d41","ssdeep":"1536:a/ewuHiaHg12h6l3KTYRSSdcEaLbo3KSQhbDLuuuuuuuuuuuuuuuuuup:KlSph","tlshash":"17d3daf9e3e8a2d0e50bc7e49575a465765f34ff2bc5c688b2ac4ed1eb0148cc989c84","first_seen":"2026-07-28T11:27:58.634185Z","last_seen":"2026-08-12T01:21:00.190497Z","times_seen":68,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/translations/en?pr=dragon","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.300Z","timestamp":1786490986300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/translations/en?pr=dragon HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: skip\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: skip\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":356,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=35\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.998Z","timestamp":1786490987998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=35\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:14 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4929,"size_decoded":1140,"mime_type":"application/json","magic":"JSON text data","md5":"c0c57001a0d24581fb35ff519d51a86e","sha1":"5075a994df0dffbc5bce028f172b43fee89535f4","sha256":"c0046145300c3459ac32539a3b3d2e13d7d55d3193e9af2c736f6e34b2ee468d","sha512":"e3037035c59f5257fed40a7c31c43bfd42bcc8a4bf63c75a1afe3090bd2ec0f2e60cc7977525c20abcddecab2a385d10a5f26762dec647cfcb1119bf06746024","ssdeep":"48:YrxTsqku5LkbRKEBlexepXhD049KES1RMo2Xpwd92McuNbHpNkh:UdRkQYT4+9Qkwd9lcQ0","tlshash":"43a1146648350cfecb1725a92fd37e4a50ed00c68ad5ee6501cecc1d8aec9eb4917427","first_seen":"2026-08-11T23:30:21.434623Z","last_seen":"2026-08-11T23:31:29.277027Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.001Z","timestamp":1786490988001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"325005f0f8ada5412640ce68c5213794","sha1":"b5fa73649a745333e6e8fc9e8078753d5961e80f","sha256":"921787834241536292003f66a99f5b7bde3909d9d356137d15b02d49e06c146f","sha512":"94c5e890db012c54e8000245c567e1d96e9af8e7acb9cfbc5635ec4877918cbb60f3b67d4f9374e93c39fe2c58b1eef67290a8f49c5315dc410e95e1a089e5d5","ssdeep":"","tlshash":"19a011002fc22ae0ce800aa002ac2ba028b002a32800222ae888000822a020e32ab02f","first_seen":"2026-08-11T23:29:45.449977Z","last_seen":"2026-08-11T23:30:50.533438Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/LeBunnyHG.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.169Z","timestamp":1786490988169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/LeBunnyHG.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69149\r\nlast-modified: Wed, 01 Jul 2026 12:00:38 GMT\r\netag: \"6a450166-10e1d\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69149,"size_decoded":69413,"mime_type":"image/jpeg","magic":"PNG image data, 427 x 575, 8-bit colormap, non-interlaced","md5":"c1122930813d3bd3fce99789d4d74f3b","sha1":"2bbde6f28aa941f71f84cac9820f214c2564d014","sha256":"2ffb7593047f013ae37ffcd559924a5a19e16c04a8cbedc0922c6d06005ed57d","sha512":"72d5555a256fc7b92ab358a78e2358a91d5a234b45791d27206dfef969dd7f21f0e3ae330472f493e450489250d3aa09c5806fe2f8f95102cfb0db01ddcf9010","ssdeep":"1536:vDJIdGnE2VtO0dr/67lKVN8KW/b4tpSVKWNClXhJLq7PZxCU:vDJIknE2V00dr/IAN8H/b4TWNwXj2xx","tlshash":"906302f727d1c6a743334a4c17a4ad65c88b5244b6380b613d89e12ed1fa9874df2a3f","first_seen":"2026-07-14T14:14:44.079481Z","last_seen":"2026-08-12T01:21:00.212589Z","times_seen":69,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=ru\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.196Z","timestamp":1786490986196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/online?lang=ru\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":28,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-YKB4XSHV.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.198Z","timestamp":1786490986198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /chunk-YKB4XSHV.js HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/main-D7IE7QPY.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 94\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-5e\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94,"size_decoded":357,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"0ccfb4a5bdbb48a64d336fd154a393bb","sha1":"dd05cdf49594f3e42d3587c7af9e305fa59a50b7","sha256":"b1b8518e18dd9e5e4db0ec528cea9d85d9868cabbcd8b7e90606d46be3b465d9","sha512":"89a6a4bd69bd5ff4d0d05068617d3bf8451f4d47596c51a5fe999ecb1ee8e328f6fe16490f36867e21625a093d7e01e79a30da86d19c50ecd915d8aa6e5a44e3","ssdeep":"","tlshash":"f9b012522800a37001478cd1c024f3011522894383e483f001cc0a9442350c2579f857","first_seen":"2026-07-28T11:27:58.625762Z","last_seen":"2026-08-12T01:21:00.198699Z","times_seen":68,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.083Z","timestamp":1786490988083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:43:58 GMT\r\nexpires: Sat, 07 Aug 2027 21:43:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 351950\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40896,"size_decoded":41709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40896, version 1.0","md5":"12eddf0213121e4f91df001e77f81df3","sha1":"e5c082e035855dfe917b9b6beb09b1619ff7ca45","sha256":"4a259dde317e08aa5d37e6eb684e222ae833516b2a0fccba36ee5e36224f16be","sha512":"697e4076437c88c2bfd9e1cf21559b7cb8748bdb58a07223b382efcd12340e29baa596e0ccae43b84435ad0bd345b1319b0995d7b781079f39ebcb1bf0d68858","ssdeep":"768:/CqLBM+LhchDaRFRDJqL1ElrEpUXATysVSc0LIWZez1GkbwzcRWqU+xvyVeFEucG:qihchDatD8L+lE6X/0SctW4pT8gpxvWU","tlshash":"9d03f2729267c80ae309d7fdd5dc67e63286e5b42d781336795cc04d3bf9a17022e482","first_seen":"2024-11-07T20:57:22.394931Z","last_seen":"2026-08-12T01:21:00.179051Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/AviatorSP.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.151Z","timestamp":1786490988151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/AviatorSP.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 283878\r\nlast-modified: Mon, 22 Jun 2026 09:42:40 GMT\r\netag: \"6a390390-454e6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283878,"size_decoded":284143,"mime_type":"image/jpeg","magic":"PNG image data, 360 x 472, 8-bit/color RGBA, non-interlaced","md5":"6929ace99d6a50d83280df8e70a88d02","sha1":"58994667e8dbd7532c53ee5f479d1cdb2ad829b7","sha256":"bc4183d39cc4bd12acb3c73744a89d584f42f2cd3360a6932f5a533287637e31","sha512":"2f2bbd800c622d839193abaf68ead85f896582ebd1f654cca3f343c0591adad0791a32c2a3a499b35fae52e36b5915dfc4177d613c82f649c5800b39d1823d00","ssdeep":"6144:3uT+oTZVlcYqs/ptv6yIM+UZXeSaYs8xW/s1Q+VxjVlVUUr9vMIaWnE:etRf/p1fIMRbs8xW/KZVxjVlxDnE","tlshash":"7d5423eb9f9722edc60d6049f584b253af93a6c26b3431af13519d183cb0598a704fde","first_seen":"2026-01-23T15:16:18.050251Z","last_seen":"2026-08-12T02:00:50.565648Z","times_seen":355,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/world_cup_drops.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.594Z","timestamp":1786490988594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/world_cup_drops.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=393216-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1884906\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-22c2ea\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 393216-2278121/2278122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884736,"size_decoded":885025,"mime_type":"video/mp4","magic":"data","md5":"2195aecfc27fd1cf9ec7101dd2f8265e","sha1":"230d2e0cf174ceb7881b0a8156409242f96c1e04","sha256":"8bd2eda4d211a4fea803efbdab4ab0c5e76c350a70474f283dc7039eef6528e2","sha512":"7a95e93524f444ef20fecf7e5f407b8cd9f64b5c91da5cbc54e43241a22a252ff4bd6f411ab8a6033ea5e923be209ac0f45e9e77c997976efdbc0a9499b94f1c","ssdeep":"12288:DF3e6ZIhJyzMuYoLW68OckbStQWLy6zkLn8nrrv+7jT4Bspo6ccY8fyhLXhw:Re6ZSJyguxLPckbStTKyrv+/0BstXBM6","tlshash":"491523c026510cc0d2a55cfbd6dacfb4b51a34909454dd23be4daa9d18f03faa34fa0e","first_seen":"2026-08-11T23:30:29.610388Z","last_seen":"2026-08-11T23:30:29.610388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/main-D7IE7QPY.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.879Z","timestamp":1786490985879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /main-D7IE7QPY.js HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-42740\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":272192,"size_decoded":73221,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5d2e10c4efbfbe44fb1faf5b4de0ff35","sha1":"5b3f10f182a0bd69ff489369efe12233688e261e","sha256":"ecf3f760743ab34a6c9b00987d40c3d6d778104b409d9f5923619b1aa50b94ed","sha512":"0ccd2b9c1368323e9d2da775e832f16db9828b7e387a8e48971d326e707b3e02d510a4e7fc7ce5a5ed8b522316929f43ae658b10754e048026b6ac613e19cea5","ssdeep":"6144:JG5dBr787OU9aUJGLuCDRG0ili9proSFGHnCc+G0+u:JYr787OUN019oLs9","tlshash":"ef4409992311757683ef129a92b54141b3b54884b80e886cb4e98cefa5bcc5813ffff5","first_seen":"2026-07-28T11:27:58.666854Z","last_seen":"2026-08-12T01:21:00.187957Z","times_seen":68,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.028Z","timestamp":1786490988028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"325005f0f8ada5412640ce68c5213794","sha1":"b5fa73649a745333e6e8fc9e8078753d5961e80f","sha256":"921787834241536292003f66a99f5b7bde3909d9d356137d15b02d49e06c146f","sha512":"94c5e890db012c54e8000245c567e1d96e9af8e7acb9cfbc5635ec4877918cbb60f3b67d4f9374e93c39fe2c58b1eef67290a8f49c5315dc410e95e1a089e5d5","ssdeep":"","tlshash":"19a011002fc22ae0ce800aa002ac2ba028b002a32800222ae888000822a020e32ab02f","first_seen":"2026-08-11T23:29:45.449977Z","last_seen":"2026-08-11T23:30:50.533438Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/images/banners/desktop/inout.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.120Z","timestamp":1786490988120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/images/banners/desktop/inout.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1233738\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-12d34a\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1233738,"size_decoded":1234005,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 2680x628, components 3","md5":"1f8b63d48d1003ed4875a38654e7fc8f","sha1":"9831212b3d8f40c4ae40ae7335080bd4feb78c43","sha256":"6c1ed3d0a33813028ef998eda62f03a63348aa92aa196729902c166fd1ab798b","sha512":"1a4b569b4770a50acd63c816ec8819f404b7df29c9bf4dab577daf5af9849db9af09fe94f6ecc7700459f2224ff90b4ec3286efaa130804e44b4d952eed09850","ssdeep":"24576:bSjsiDjFYozcbEBZoRlprZuBP+HnMSvmuZXeyRYVjNV:bSj/VzYAZ2lprk+HmKey8P","tlshash":"24253345e67342222baa09c0349b6ed6a3610b9f14cdf0518b8c0d9df5e9fa7a754f3c","first_seen":"2026-06-14T00:23:12.748672Z","last_seen":"2026-08-12T01:21:00.226698Z","times_seen":71,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/MinesOR.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.156Z","timestamp":1786490988156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/MinesOR.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13868\r\nlast-modified: Fri, 03 Jul 2026 11:38:18 GMT\r\netag: \"6a479f2a-362c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13868,"size_decoded":14131,"mime_type":"image/jpeg","magic":"ISO Media, AVIF Image","md5":"5d99041f24daf0e0d6e053b49a66c95d","sha1":"4c574627f800148c9d40fe51a6f44d4e6f50f11a","sha256":"7bb8fa1db4620b27c6d1c3bc4739a2a806b2d6aab8a9fbb0bf3713a3bcf49d83","sha512":"3f7ed070c57da67be4daa47abc60f6e03ea9fc64d89ac0d31e4a8957183fe0b7e2d77a3487d47ccca656e2cf3005bfd27feb23e6190a6da387743c1134eff57c","ssdeep":"384:DukjxFGJ187XK2uLUVmwmm/owVTxQW/iPwkPn:puA7hkwIlW2ws","tlshash":"aa52cfc223451805be4e47375152f703b1b8cb6af814b5b11af65e04f9e82af23476ea","first_seen":"2026-07-28T11:27:58.674782Z","last_seen":"2026-08-12T01:21:00.215759Z","times_seen":68,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/blackjack.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.386Z","timestamp":1786490988386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/blackjack.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=2621440-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14513\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-2838b1\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 2621440-2635952/2635953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14513,"size_decoded":14801,"mime_type":"video/mp4","magic":"data","md5":"aa90b7d887d3032051b3810cba6cb41c","sha1":"fc5bc320f98d79bd8ec8ed6b48dfb5441467be2e","sha256":"f53a933207ed13632bd8cf3c4adefe4936079921bc272ed44b48a92f7d33b682","sha512":"c6858771dab69526d9056d21f2592c39c45f434c55cac1242e1b9b51cdf4792fb03d1bc6df38ae4bcdff242f4f846cc5bda33fa229f0aabfbe45a661ebdcb1ca","ssdeep":"384:nuUM9ZOFzH+e87SdvMJIHIIsc75ISjHZ0U:nuUa6zH7qSFZicdj5","tlshash":"c4525ab833406867d1631b70a2e15721f1f6e6ba735bd3824972031afc92bd28f215d9","first_seen":"2026-05-28T01:16:50.806818Z","last_seen":"2026-08-12T01:21:00.193956Z","times_seen":78,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/styles-VL46ERFP.css","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.895Z","timestamp":1786490985895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /styles-VL46ERFP.css HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-47c9a\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294042,"size_decoded":38609,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"675a9b3197d7ed897efc6ef5c33cec62","sha1":"a65ce795580d6620436dd4296620ed60af305a5a","sha256":"375c51836d9b648590940a59e03bb13419d16e91b2f65909e35a981bb9de6482","sha512":"1f1285493e7ffa8067bbd0db9c4eddda5a449fa4987bc12ff89af47526022e829c7276e28414df0422bce8d0f4d3a35dcff64db2718d026db490515b22ba6583","ssdeep":"6144:44CZMIbZ1R+PnzFfhrgDSAgiM+zNzxM7uT0yKg2yiMBQ8Hm0ExCYcGlv9qfYUEKc:44CZMI2SI3","tlshash":"7e54e871b326613e7c2b88b691d56cacb13fe580ef2319f5fe10543587c26e60a69738","first_seen":"2026-07-28T11:27:58.635195Z","last_seen":"2026-08-12T01:21:00.192191Z","times_seen":68,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/kz.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.046Z","timestamp":1786490988046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/kz.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-2cd\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":717,"size_decoded":631,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14e2ec95d13fc260964e11b2ee20b9f7","sha1":"cb163c36dc384c689a042e9deb24d7e8078f3d52","sha256":"3460f9f4f71ae436e3b9af25582f539067b736568bff813ef4fbcc6926e30cd8","sha512":"5ed6fadfbf024a647eb6edfc49a79524599952c2240987292441da4de06497cd9112205450871ae3dd909489cec26569276d4fde61ebbb3873d75d268b7967ac","ssdeep":"","tlshash":"a001cbf08b599a2c98c24907cbb8676c223b80a177e016d2fdd81df8500bc07a84b349","first_seen":"2026-07-28T11:27:58.660131Z","last_seen":"2026-08-12T01:21:00.183442Z","times_seen":68,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/summer_gift.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.107Z","timestamp":1786490988107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/summer_gift.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1763473\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-1ae891\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-1763472/1763473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1327086,"size_decoded":1327370,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"36945818de037adff6302d839207c3a5","sha1":"7c2ec0e809f7fa05ada6c3861708d3fde1d4aa90","sha256":"c31a3a2caeac52ce2f815ea5f588c3b3169eb9a1c3ee574081c1113574dfbe28","sha512":"449f51de5862274cc50b6209ac3ceef7a543465b401f7c75eefd8312ab2b082f3c27fb81051ac96d420145fa1cb03449728f9210d2396fbb35f049b9209d0467","ssdeep":"24576:WMj1ZYXqpWH4AA7d7zqrEJRrPRi2cw3xNKKJP:bpg8RnrPRi29xNKqP","tlshash":"2a2533752b8077f5fc609f3a42e09f371ea4691e60498949f1ffb9a6aff5b884700811","first_seen":"2026-06-04T02:38:40.574479Z","last_seen":"2026-08-12T01:04:22.431967Z","times_seen":41,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/world_cup_drops.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.383Z","timestamp":1786490988383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/world_cup_drops.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=2260992-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 17130\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-22c2ea\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 2260992-2278121/2278122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17130,"size_decoded":17418,"mime_type":"video/mp4","magic":"data","md5":"424ab6797289f319a86c4f6ff35580ae","sha1":"17771334d3437057ab0f4ea2f164fc71b4e513f7","sha256":"602d25e35fb151b099d4c0d1b198ce611d0164b42a43f93a11d00cb3f70104da","sha512":"b49957ad7ac193eaa138b2489976bf24ada60b4fecb20c2e6580625f383dd2b987822f2f91b90f83cbdb18daebdd0e2eccd7f2f8e3a88cb65aacc69c69d738b9","ssdeep":"384:x887uAT6VgtjWXxDQ+OlEPJyj8qv/GSJnwLUWYBj7oZ5LYU:xF7uZVd0lFAKDfFoD","tlshash":"e5728c75b3800567ca600b303adaab15f6f4c6393793d3c742a18369fe6a3e05f1a8d5","first_seen":"2026-06-14T00:23:12.749958Z","last_seen":"2026-08-12T01:21:00.187024Z","times_seen":79,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/favicon.ico","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.419Z","timestamp":1786490986419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-2b37\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11063,"size_decoded":3728,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6168)","md5":"7f7e9cda07814f8f01a9d883d5494eba","sha1":"14263d232877af5e262f8eb42ba1af18e6825ee1","sha256":"849b221a23f6d7cac222ba806f03c7a66d6cfcee5e588e6de2c3af18469a89be","sha512":"96e98b627ac8ceedd2aab64d35bdaf3e62cca7e67213e2edcfa14d8a88dd1940f187bb95a227f13316fc59cb493cd3583e94ac32176713fdcdc8fb4debc0aeae","ssdeep":"192:ySj6V7XRJdfIGJkB6JkokZJZdGW887JXYXEtgUI/fDY5:yS63uFdv8KON/85","tlshash":"0522fb5f9a6100048e0749d7eaca7b18a525d1c39b32dcda72cc555adfc2be812dab0b","first_seen":"2026-07-28T11:27:58.64686Z","last_seen":"2026-08-12T01:21:00.19966Z","times_seen":68,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T23:29:45.405Z","timestamp":1786490985405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-2b37\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11063,"size_decoded":3728,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6168)","md5":"7f7e9cda07814f8f01a9d883d5494eba","sha1":"14263d232877af5e262f8eb42ba1af18e6825ee1","sha256":"849b221a23f6d7cac222ba806f03c7a66d6cfcee5e588e6de2c3af18469a89be","sha512":"96e98b627ac8ceedd2aab64d35bdaf3e62cca7e67213e2edcfa14d8a88dd1940f187bb95a227f13316fc59cb493cd3583e94ac32176713fdcdc8fb4debc0aeae","ssdeep":"192:ySj6V7XRJdfIGJkB6JkokZJZdGW887JXYXEtgUI/fDY5:yS63uFdv8KON/85","tlshash":"0522fb5f9a6100048e0749d7eaca7b18a525d1c39b32dcda72cc555adfc2be812dab0b","first_seen":"2026-07-28T11:27:58.64686Z","last_seen":"2026-08-12T01:21:00.19966Z","times_seen":68,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":22,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WXWZLCS9JJ\u0026cx=c\u0026gtm=4e66a1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.872Z","timestamp":1786490985872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtag/js?id=G-WXWZLCS9JJ\u0026cx=c\u0026gtm=4e66a1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\nexpires: Tue, 11 Aug 2026 23:29:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172162\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509994,"size_decoded":172766,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"7f49cc795f8b71f73876fcc1558975d7","sha1":"b00974cc0e0ba76f213fdf2e37fb38e07f506a2c","sha256":"bc9ce92f056cdb32c65997ae3cca00a26c82afb7b777fc4ee3ab14ddc04c2a58","sha512":"86b96c7f1eb8c018a094bba85f0631d31d359e9a9b497cb91d364ca71a4672457173dbc99ef123ee5f89d95456d6be70c4b10608cbc59f4cfb59e6c634a13735","ssdeep":"6144:XSGbjzqjU/Qu8mLaW3IuNcad5JdEQJ3iDN1jpjU4Oet8:iGPAU/p8I3M19U4OH","tlshash":"99b4e8ceb3d674265396f078503f01cba57b28a2b45cc89af189cce42e7469a4127f7c","first_seen":"2026-08-11T23:26:53.664489Z","last_seen":"2026-08-12T01:21:00.18966Z","times_seen":17,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":37,"receive":59,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/tr.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.044Z","timestamp":1786490988044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/tr.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-1e9\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":489,"size_decoded":541,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e95ff210f01c4f60f3386ddd81a8430a","sha1":"4a81ca95d479d7de4be7e9345753b0dd4ac7602c","sha256":"5e40e45d873243fe171296cba50857e5a05dcaa30c7097dffd48935d0bd47633","sha512":"b016afa0b6fa83a00ca4d20f0ea6ea21035283e5b6e9b2022245483b307e97b38e4e045ba4cc208c4c935ac0da66af96ed92a241ad7d0f240d388a6ee3ffad53","ssdeep":"","tlshash":"96f09eb050f90b6c41600404d75e14da3d3de8caa37903d5f1548d812c4954a265d25e","first_seen":"2026-07-28T11:27:58.654489Z","last_seen":"2026-08-12T01:21:00.203521Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/de.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.048Z","timestamp":1786490988048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/de.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-124\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292,"size_decoded":406,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1833d27794e1fb6082364ce9deae6c6d","sha1":"b11925ff42766edff10f7ff69b6da7768008e838","sha256":"9ad80dc1e0fbabfbdb8d1e301974eec97776d637d377c34317af47497d1364ce","sha512":"583b1c39465fa05191a637daf9742eef54a80298ea35c05972e3155a5bef1d701ba1221dc2e729c9b03e8adc727a907ef699b27f08f5b7e6ee0921c8d8954180","ssdeep":"","tlshash":"06e05b60e68c250dc6109759256879d56043b0d5cfd55913feddbe53630cc87ac293df","first_seen":"2026-07-28T11:27:58.646028Z","last_seen":"2026-08-12T01:21:00.204715Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.086Z","timestamp":1786490988086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:43:58 GMT\r\nexpires: Sat, 07 Aug 2027 21:43:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 351950\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40896,"size_decoded":41709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40896, version 1.0","md5":"12eddf0213121e4f91df001e77f81df3","sha1":"e5c082e035855dfe917b9b6beb09b1619ff7ca45","sha256":"4a259dde317e08aa5d37e6eb684e222ae833516b2a0fccba36ee5e36224f16be","sha512":"697e4076437c88c2bfd9e1cf21559b7cb8748bdb58a07223b382efcd12340e29baa596e0ccae43b84435ad0bd345b1319b0995d7b781079f39ebcb1bf0d68858","ssdeep":"768:/CqLBM+LhchDaRFRDJqL1ElrEpUXATysVSc0LIWZez1GkbwzcRWqU+xvyVeFEucG:qihchDatD8L+lE6X/0SctW4pT8gpxvWU","tlshash":"9d03f2729267c80ae309d7fdd5dc67e63286e5b42d781336795cc04d3bf9a17022e482","first_seen":"2024-11-07T20:57:22.394931Z","last_seen":"2026-08-12T01:21:00.179051Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/FortuneofOlympus.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.173Z","timestamp":1786490988173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/FortuneofOlympus.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90622\r\nlast-modified: Wed, 01 Jul 2026 10:17:16 GMT\r\netag: \"6a44e92c-161fe\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90622,"size_decoded":90886,"mime_type":"image/jpeg","magic":"PNG image data, 427 x 575, 8-bit colormap, non-interlaced","md5":"a2beb7604f2592dda0baab5829e9caf4","sha1":"c8ec190c4128c8c0e7f1a3d7656531f6fcf58e06","sha256":"fe130dfe0419835a2cb873b1980086e0081e04cf8c6b99eb5dbc181a5c0c3cf0","sha512":"bee6b964b58e947b2c834631debd5d1347470d475ad1a31cf453ffab89b3c6fcaedfe0cabae9e54565694f53a8a05e46304416262b7e8b4168318cd93f9bec0d","ssdeep":"1536:SGMZwadGflniaBJjpSVP8Ez+wNzokI/mT8EI9cwfclxXJ8vFjZE53HFPuds0wa5d:1EwadG7pfEz+2w+Tt2rE53FKfJ1","tlshash":"7e93127a432b7c890925fb2d657b5d9b32738cfc91c0216abbc0cb55eda1978c21dca0","first_seen":"2026-07-28T11:27:58.659279Z","last_seen":"2026-08-12T01:21:00.206122Z","times_seen":68,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/summer_gift.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:30:09.777Z","timestamp":1786491009777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/summer_gift.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=1048576-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:30:09 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 714897\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-1ae891\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 1048576-1763472/1763473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714897,"size_decoded":715186,"mime_type":"video/mp4","magic":"data","md5":"60cd75bb58c32d577c87b81bbaa63113","sha1":"1a090d982f8dcf32ba6fc9f268446963ed0a82c6","sha256":"d633f405fef71542279eda5e234cc12c29a4c145dd8f09c2eb9b970bc3a5266a","sha512":"6c888025c9c11835f58eede7de8465041bff4c71f8226b69ab69ec0332c45fd0987c1efbcc7f0757b8bdeed0d9a73f01e7dffa7b8865fcbd4f60c35a87bceb59","ssdeep":"12288:2K/G2aJpaTQqFYVEfVzC79hr5GzOnzrBYy3abJrpKGAh0vMPqkrvNv8fk:23d/iH1K9hrUzOnpFaVoGAk4xrvN0fk","tlshash":"83e423efc66135bcde260d112189df13c2919411c970e3ce397a8e634d86a5ec3e6f96","first_seen":"2026-08-11T23:30:29.621612Z","last_seen":"2026-08-11T23:36:45.34818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.064Z","timestamp":1786490986064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:43:58 GMT\r\nexpires: Sat, 07 Aug 2027 21:43:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 351948\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40896,"size_decoded":41709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40896, version 1.0","md5":"12eddf0213121e4f91df001e77f81df3","sha1":"e5c082e035855dfe917b9b6beb09b1619ff7ca45","sha256":"4a259dde317e08aa5d37e6eb684e222ae833516b2a0fccba36ee5e36224f16be","sha512":"697e4076437c88c2bfd9e1cf21559b7cb8748bdb58a07223b382efcd12340e29baa596e0ccae43b84435ad0bd345b1319b0995d7b781079f39ebcb1bf0d68858","ssdeep":"768:/CqLBM+LhchDaRFRDJqL1ElrEpUXATysVSc0LIWZez1GkbwzcRWqU+xvyVeFEucG:qihchDatD8L+lE6X/0SctW4pT8gpxvWU","tlshash":"9d03f2729267c80ae309d7fdd5dc67e63286e5b42d781336795cc04d3bf9a17022e482","first_seen":"2024-11-07T20:57:22.394931Z","last_seen":"2026-08-12T01:21:00.179051Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.968Z","timestamp":1786490987968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:43:58 GMT\r\nexpires: Sat, 07 Aug 2027 21:43:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 351949\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40896,"size_decoded":41709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40896, version 1.0","md5":"12eddf0213121e4f91df001e77f81df3","sha1":"e5c082e035855dfe917b9b6beb09b1619ff7ca45","sha256":"4a259dde317e08aa5d37e6eb684e222ae833516b2a0fccba36ee5e36224f16be","sha512":"697e4076437c88c2bfd9e1cf21559b7cb8748bdb58a07223b382efcd12340e29baa596e0ccae43b84435ad0bd345b1319b0995d7b781079f39ebcb1bf0d68858","ssdeep":"768:/CqLBM+LhchDaRFRDJqL1ElrEpUXATysVSc0LIWZez1GkbwzcRWqU+xvyVeFEucG:qihchDatD8L+lE6X/0SctW4pT8gpxvWU","tlshash":"9d03f2729267c80ae309d7fdd5dc67e63286e5b42d781336795cc04d3bf9a17022e482","first_seen":"2024-11-07T20:57:22.394931Z","last_seen":"2026-08-12T01:21:00.179051Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.002Z","timestamp":1786490988002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/es.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.049Z","timestamp":1786490988049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/es.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-121\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":289,"size_decoded":406,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2064e179a360910a5ff2e54cffde02af","sha1":"4513c2289b6931bf8b4d00d231d4c7886029a81a","sha256":"ed03376b6ea758eae59f72e6b9171bd7726329a8823cd6a637c32c211eb31f2a","sha512":"63343ce0199c74c4dc40908d15bc65c708e78420436a33ac7a4004d83951173bb99a015c51b6d2b6ed2bc2e405131822ce62b8095bc48d4416e596474216e0c4","ssdeep":"","tlshash":"1cd0c220a048274dc7001749b66838d820179058c3560507fe98be53620c887ad2d35e","first_seen":"2026-07-28T11:27:58.670501Z","last_seen":"2026-08-12T01:21:00.24838Z","times_seen":68,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/amaterasu_treasures_x1000.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.106Z","timestamp":1786490988106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/amaterasu_treasures_x1000.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1673761\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-198a21\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-1673760/1673761\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1146880,"size_decoded":1147164,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"d7f9614ca36cdc5570468d957ff55bf4","sha1":"b88fefc6e4f693cda4a9773d9e85ae11eb9fb343","sha256":"86c82f1c62a6a3cae5df3886b92d4db7f52cc924718de68b7f53d7128f705f97","sha512":"c003b31ebea926df69221d46fa509385b2815ad02cdf4ac7c17f9e5d52c0a68b5ad71242198d1d53d96e5538a9eda5021f4b7b438cf973553d207cd0d7f1cc30","ssdeep":"24576:yb71vzryJ5hWygDpxAVORvY9d6c16VybANApUiF193+UrLBdOKxPC:ybtKJ5hDgNJRvY9Ic0VyHqiJ+UyKxPC","tlshash":"0a2533cb2d1978bdedaa5bb180d9c20f632c0b18749476993fce8f87630a7744513a67","first_seen":"2026-06-14T00:23:12.631771Z","last_seen":"2026-08-12T01:21:00.228628Z","times_seen":37,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.995Z","timestamp":1786490987995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:13 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5002,"size_decoded":1076,"mime_type":"application/json","magic":"JSON text data","md5":"20454434c647a4fc896454f5f11b1489","sha1":"c1703ed3cc90d466e612ea31a0cd2ed0b882f8b0","sha256":"49fc05cd0f33076a249d4de0b6394f9b98c8ee2f362a9141a42f5ca65e1b3909","sha512":"65a1c695ff19a716a19a3bb49b36e575bf14434f6c95299563126d426539088fe10ee57946d9030e27031c1b7fd6afe8950dc8c49509b56041fe00e23fee7f54","ssdeep":"48:Yr3r3M693FJR/lbH9v9aSG0iqoZmaO13dgh:o7z93519v9aSHroZpyK","tlshash":"2da12b7645240cffcb1724a52fe37e9e509c44868adceea455dacc0c89edbf644068b7","first_seen":"2026-08-11T23:30:10.872625Z","last_seen":"2026-08-11T23:31:29.286739Z","times_seen":9,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.006Z","timestamp":1786490988006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/polyfills-TTQONNZL.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.878Z","timestamp":1786490985878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /polyfills-TTQONNZL.js HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-8aa3\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35491,"size_decoded":12655,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35490)","md5":"3344d2aa4d02094c112e3f45f4eeff52","sha1":"d548b8a63fd91acc01d85d44db7898f2c645ac37","sha256":"64972c117699f396eb5ea760c504708d1640b161764c01527924d8e49b91313b","sha512":"2dce7654ca213606f2d932138d88dfd23ccdba496ae01a213329c5ee70518a4bad42d1ac5120b5e7a919567705a5c79071869a927467c300971a8e521c7b84fa","ssdeep":"384:3m6aC1NwlMBw6sMRPjb+e3yGYjgP3NiIzvv5IwrUAsT7oVaG0wl+Z44M/AAuASEf:3naC1OlMyjaN3NiINxrUAsTclZvzL","tlshash":"bbf2d5e97752f0a6c7fe517181bf8007e73664e0288c08adf54d95ea283605896f6f3e","first_seen":"2026-02-14T08:27:01.087079Z","last_seen":"2026-08-12T02:00:50.652174Z","times_seen":355,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/currencies/usd.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.050Z","timestamp":1786490988050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/currencies/usd.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-8c6\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2246,"size_decoded":1372,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f0d93188cb2c63716163cd0d82df8a8","sha1":"77f3b184be8ead2b976640468eb85ecffb014cb1","sha256":"e7fe23ed36c2a6a8bf75f67cc04b7f1dfb1323cef90d2232de9a0cf12b0ea020","sha512":"fd280372f55c16bde96db1842805e362989b10463522088f1ef6ce60b8935cb84a9807ccc5e8bc25f88bd1d17ffe65057e7ca215d92ab666f28abef8afd79177","ssdeep":"","tlshash":"96416385637e6539f009a6f6479761b83d667de63931c5b1c3d70e29e80682c0ca08ef","first_seen":"2025-11-12T05:08:31.207664Z","last_seen":"2026-08-12T01:21:00.209016Z","times_seen":113,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/dragons_treasure.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.104Z","timestamp":1786490988104,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/dragons_treasure.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1574611\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-1806d3\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-1574610/1574611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1574611,"size_decoded":1574895,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"f396b99828f5dbe0ddfe61c5ba279480","sha1":"4484e9687f2982f81d48456dd2113d9d8e747fd8","sha256":"86eeebf08912f672beb043260c1f0f24baf5ebf013ec403fdfe742dca85eec86","sha512":"cbeb75d928bd5fe357a8d68b9379be799f039d2cf7df10802b558e9a2c7e4559c1a2dd755add80fc0287c29cab2fcc8b98de65c4ab06b79e7b3f37427c0b906a","ssdeep":"24576:REfIo/MFvUGECKVOvtIQ3uiI2U7YtkavZO0OwdISjZVbEV09p/:q5k4CKVOFIQbI7YjvTjEG","tlshash":"742533e4aea42eabf0e79072d0843456018ec97b61862f1774cd4cdecfde4699e68c74","first_seen":"2026-06-14T00:23:12.675187Z","last_seen":"2026-08-12T01:21:00.222862Z","times_seen":47,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=47\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.005Z","timestamp":1786490988005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=47\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/category?lang=en\u0026pr=dragon","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.990Z","timestamp":1786490987990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/category?lang=en\u0026pr=dragon HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:25:51 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4310,"size_decoded":1167,"mime_type":"application/json","magic":"JSON text data","md5":"07a7687a81b9258a2d8389b12322efb4","sha1":"0a7600d17a204122cd01e9456b4cf0e35b6667e7","sha256":"f5645667d58718bbbd5dc30e8375f35141a2e161b6e6b3fe1a5055cb4be8413a","sha512":"d282f3de807e778a4c438b4b8bda2228120b9934bd18abbb4ec160c99ba2da91280933a930fdf1d8380278b8ad72189ab8e4db6fd5a627283878526b76ad447f","ssdeep":"48:Y0HJWFWVoHNJOKUxngbMxJv1JbsH8J4TzQvhjpVBdWiejqkJbSARgqbKFalXu:HyWkqKwxJYH8JdYiejzm","tlshash":"5391b133e11449fad369bfc53cdb360629ea125c3dc0ed2aca48d60d02959f94727977","first_seen":"2026-07-27T20:00:40.713912Z","last_seen":"2026-08-12T02:00:50.572099Z","times_seen":313,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-NWHN5MI7.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.875Z","timestamp":1786490985875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /chunk-NWHN5MI7.js HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-153fcb\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392587,"size_decoded":318931,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eb3f924ca18ad593d73b1529f87e0208","sha1":"12d81ca7e1a70469610844f23455ad46ae70c44a","sha256":"3a282130c813c16d3bacea8f61843f44beec7fd7613c6fc6c77485b43921138b","sha512":"58b89a7c59d5d6661c4fdc441b850f285d29d4ddf80caca1aa0f5158fee104bab30bfb9705fe88de358fa471bbedd42bdd541e8f14cb2a272a9f0a2805118557","ssdeep":"6144:WpTn3/s0Ww/DAew/tqy0HQyq6Q1Dhj/5r4kKeP03vFyLsLPviqfiwoWILh6ILcUi:WpT3/sqv3iU3vFyLk3ikiAIAUCft3","tlshash":"432508d0d233492caad63112f2793c9d34187842ea09c36ffd7c9997e6c469493e27ad","first_seen":"2026-07-28T11:27:58.630479Z","last_seen":"2026-08-12T01:21:00.219392Z","times_seen":68,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/domain/info?pr=dragon\u0026lang=ru\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.190Z","timestamp":1786490986190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/domain/info?pr=dragon\u0026lang=ru\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170,"size_decoded":376,"mime_type":"application/json","magic":"JSON text data","md5":"49ff770cdffbd76c960d84e6680b98df","sha1":"b9637b8da351f9fec0cab0ffd82c61773ab1e806","sha256":"14655c9321d7a262c3a49000876eaf434d6b4a3238046b65b5652b4ea17e5c53","sha512":"d1de04f31a66112db6b38b1577b5d814cad7348a463ad9dbc796a73ccc06e677a552e8d576c8c393159cba0d290a324d0ec19f83b1ad36ddc8690fe0e29b1422","ssdeep":"","tlshash":"0cc08c522daa5c3be6166a9024e03e81c2fca867d05c7cb8c85c2b3886b42a2270255b","first_seen":"2026-08-11T23:26:53.628525Z","last_seen":"2026-08-11T23:30:29.628059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":4,"connect":24,"send":0,"wait":27,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/crypto.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.111Z","timestamp":1786490988111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/crypto.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1008139\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-f620b\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-1008138/1008139\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1008139,"size_decoded":1008422,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"15b3e0fafc56675aa17e6ce47059c259","sha1":"343692821f78b4b38ee63a8383420fa78f95179e","sha256":"eff04a1480646337aef8a1a54f1d6150668eb0df906b4f35fbfdd917f9d2c89b","sha512":"ddf3e4e43bc8bb89d037a22c60718d4ca8f197c224c2262959a1396c2da87189e80e00b1d232a49893954f4383eb0a337ff1235b3ae614c8e830abeb3f84d6a7","ssdeep":"24576:1jXuPcxW/6TFVZO+5kQRT2ywTRf/K7l7fI83e:1rdk/8Vo+5km2JTifbe","tlshash":"a3252302af91f318c71d25bb87983a101df91f61c2909e6d9cba36b4b2709d17f6b724","first_seen":"2026-04-08T04:36:16.383761Z","last_seen":"2026-08-12T01:21:00.229155Z","times_seen":84,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/favicon.ico?_=1786490987973","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.974Z","timestamp":1786490987974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"HEAD /favicon.ico?_=1786490987973 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://drgmoney26.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-2b37\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":264,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.996Z","timestamp":1786490987996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=35\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.004Z","timestamp":1786490988004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=35\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.031Z","timestamp":1786490988031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"OPTIONS /api/online?lang=en\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://drgmoney26.com/\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx-rc\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":364,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/ru.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.043Z","timestamp":1786490988043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/ru.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-124\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292,"size_decoded":414,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"855bc3c0f6641690c947179e554333c7","sha1":"6e5b98e35354e21d663b9844aedf8c92025558ed","sha256":"9f4accea3188edb81de3b20c01b4541654722ed3c03124e88fb0da5dcd4b9ede","sha512":"9d004255d1abc7e72bd2e592930ea6e068816ea5366079dfd6cdd28d04aec9bbcf3e891257b6fac1874a506033505a994e6a95a8e48b7a5643bd54824235eeee","ssdeep":"","tlshash":"74e0c260a28c240dc6109b09256c39a4305390d5cb554813fe9dbe53670c48bac2939f","first_seen":"2026-07-28T11:27:58.640348Z","last_seen":"2026-08-12T01:21:00.177967Z","times_seen":68,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/images/slots_bg_mobile-BKjAZFV1.webp","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.051Z","timestamp":1786490988051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/images/slots_bg_mobile-BKjAZFV1.webp HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8352\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-20a0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8352,"size_decoded":8614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 764x454, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d453a26a46fd349525b6d7222261c150","sha1":"7933f51be8506969b899cd7a205dc746af504b6a","sha256":"42c29cda128af6d1cf9faf76269339d46bdb909359f85f02a19a14c788413ad7","sha512":"e7a82c07a486a40eb43ec5e395069f470392bcc1f307566cc8aab60590205136060b834613b9474ed7ff1413e5be1745685c24b891d61e51565e62269c9a4354","ssdeep":"192:qWCjbbQ+lWey1iCsJcMj7v5xS3zkA/KLeEBYfkWNlZGaL:AjXyt1WqKb5xdKWmZNlZGaL","tlshash":"aa02be24b163119e2e2c63729de64d6ced20b5f092852cb594d850eb6ab9b3fa0d00d3","first_seen":"2026-01-07T13:18:39.865264Z","last_seen":"2026-08-12T01:21:00.247431Z","times_seen":69,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=47\u0026per_page=20","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:47.999Z","timestamp":1786490987999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=dragon\u0026device=1|2\u0026page=1\u0026category=47\u0026per_page=20 HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:14 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4734,"size_decoded":907,"mime_type":"application/json","magic":"JSON text data","md5":"5a7caca20f6fd1d1648703c1cf8770c8","sha1":"1979e179fec3d99e532689a8673e2cade0760042","sha256":"abaf61ad7e1e4948ecf43c527b28047894b822ff6e04bae2a052422f7e1edc10","sha512":"8733cb3f251ee29f273a5acec9020701b70f9c0de8c88078a2b08a07706a3f10cc9689f22a00f772e38311c2f2bb377e064e7fe36834285df20e0edb038c744a","ssdeep":"48:YPbg8bgchbgdbbg68Z3bg+XbgCwbgJQbgVrSEbgrY4bg7bgGbgKXbgQbgLbgk7Fh:iBPobF8RxhwHoSEx4m53Xj6rwXhXto","tlshash":"e3a1e56a45360cffca2729a53f933fc6509c81da9adeef64418dcd0c96bc9f54906832","first_seen":"2026-08-11T23:30:21.444574Z","last_seen":"2026-08-11T23:31:29.260749Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/images/live_bg_mobile-CMh3ZkNT.webp","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.052Z","timestamp":1786490988052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/images/live_bg_mobile-CMh3ZkNT.webp HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9046\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-2356\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9046,"size_decoded":9308,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 764x438, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f30db3cd90a0d226488c28124e42493","sha1":"1b399f9ca2c9fa9a59b4e0867ceac55d33e24a99","sha256":"8af6e9e60f69e935ea6ccc0c98ac932ba325294685f42f0f7ab434a271543faf","sha512":"42cb095845ad864220bda6abf35412c74dec7cffabc8e722ce7971f047d9b0157b818888adbfbc09fc0ee69c4b498b8d849ff8a3ebcba64a4bd56c5333eeb4d8","ssdeep":"192:vhDJZfbrQwAFYNG/eV7EWJaleyLx3ryBI25Dtbciq7/6VBHr872:vhDJVrRAF7JJ4r9tvq7CVxr8i","tlshash":"3712ae8eff07d976b0e11bba3f7810a857119886c842e513621079b16fdc61c1e628eb","first_seen":"2026-01-07T13:18:39.866922Z","last_seen":"2026-08-12T01:21:00.18425Z","times_seen":69,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/ZeusvsHadesGodsofWar250.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.172Z","timestamp":1786490988172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/ZeusvsHadesGodsofWar250.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81980\r\nlast-modified: Wed, 01 Jul 2026 10:17:17 GMT\r\netag: \"6a44e92d-1403c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81980,"size_decoded":82244,"mime_type":"image/jpeg","magic":"PNG image data, 427 x 575, 8-bit colormap, non-interlaced","md5":"6b50630c8123debbfc8c7435979b6dd4","sha1":"09a705cad6fee381048db26c6271513633bf445a","sha256":"5433caf7980bf829177a4ce66393c24c371f0487ef0a1476e8d0cc6d37e8e9cf","sha512":"686e50345f7f4bed4ae243d8002cd614acb6be9705fd4c4e9504337deed26798c8119b631647e7c3cb8195f3847db722a4cbbcedcafef0bf9c84e1e2d57b2846","ssdeep":"1536:B6aF+Xg6TrmAa2zTGjcz8r/ihEfDu2xOBlWJe/ekIgSnZx7:QaF8rhTG4wr/iufDu2ObWJe/sJ7","tlshash":"d58302bb5619d71acf6c33bb57e028f5611a67b18f96920e693c39bbfb440f01072540","first_seen":"2026-07-28T11:27:58.631911Z","last_seen":"2026-08-12T01:21:00.180087Z","times_seen":68,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/blackjack.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.598Z","timestamp":1786490988598,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/blackjack.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=262144-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/amaterasu_treasures_x1000.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:30:02.452Z","timestamp":1786491002452,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/amaterasu_treasures_x1000.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=761856-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:30:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 911905\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-198a21\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 761856-1673760/1673761\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":911905,"size_decoded":912193,"mime_type":"video/mp4","magic":"OpenPGP Public Key","md5":"96d204cbb953ad624eef79523baf5c30","sha1":"0e07e08939a679986229cbe8f33a3bbc67dd4b40","sha256":"9787a3f7ebf53ddc6efe4de01a9b9ab63d94551f660978dcc2a308b2a48350ae","sha512":"182105201613d2ecb52f940306f1071788b9615432bee19e9d54a2450e7416d543937bb83e19379d71e8a4b0f534aa70fd3f1817422c4ebdb05485149c8d775d","ssdeep":"24576:iiF193+UrLBdOKxPc/HJhiAW2f+ysEgflUIfN3B4nps:iiJ+UyKxPcfJhiMsEylffNxMs","tlshash":"861533bf102ce5bb91de53d2a0c5d0ae1336d31994f45eb95e88ce104e843ae9a07f79","first_seen":"2026-08-11T23:30:29.633329Z","last_seen":"2026-08-11T23:30:29.633329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/images/logo.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.897Z","timestamp":1786490985897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://drgmoney26.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-1fc7a\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130170,"size_decoded":44825,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6294d03736112351e14c5408d9b2704a","sha1":"25824fc4ab5afcf65b304d65f87c2e249c70e650","sha256":"41dfd3442bcb1cc754a6db19b8e67967933faf99d46dc777cce712b45e4bb617","sha512":"89e3b54096dd37eefea39a81bea547b3a2f83b9a189b7c240b9b1d92d9e45a2e75a549c7a52dc1030d210a10b3ff41ebd8cfa9a52b8968c4f2c1881723728d41","ssdeep":"1536:a/ewuHiaHg12h6l3KTYRSSdcEaLbo3KSQhbDLuuuuuuuuuuuuuuuuuup:KlSph","tlshash":"17d3daf9e3e8a2d0e50bc7e49575a465765f34ff2bc5c688b2ac4ed1eb0148cc989c84","first_seen":"2026-07-28T11:27:58.634185Z","last_seen":"2026-08-12T01:21:00.190497Z","times_seen":68,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/merch.png","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.041Z","timestamp":1786490988041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/merch.png HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1851\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-73b\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1851,"size_decoded":2111,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"34ab987bf7085ec0a2afa643de3e64f2","sha1":"404c28782063ddaa81441cf32a23046423f3419b","sha256":"c27ffde2e4e23bca0fa7748a1b2faea8d7d432c93a20aa8ba9e17f11f0ab3329","sha512":"483156101f7f4442a49f16850d44ed3172ef6358ccef5d6948f0c37c79b9e2c182f5a1a017bacf0158b8bf048f5b739a853de36dfc6f429d13763fa1b3f84e19","ssdeep":"","tlshash":"6031e9a423a55c23e19c43b27c858e3a3af6c4a85fe28a5f1fe57048092a7934479d7c","first_seen":"2026-04-08T04:36:16.446791Z","last_seen":"2026-08-12T01:21:00.182633Z","times_seen":111,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/img/icons/flags/ua.svg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.045Z","timestamp":1786490988045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/img/icons/flags/ua.svg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-df\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":393,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72ece3d1e0b21822dd2c298f9a62687e","sha1":"9672e92a305e14a082ce1077d34d019398c507a7","sha256":"d2982aef3d9980e75694725522e4bc87765c67e04f1b97138d83a08c353011b4","sha512":"e93401182e0512c1d986d625ecc8902c04803fa4cfa9383db5ad4040a593ccfcb0480a945d9c71b6df39a253212d754cc7341959657cce9767940c2d67112109","ssdeep":"","tlshash":"b7d0a924b08c0a0dc5240b06696c79e8a037b8d0c2790213fec8be67b00d8cbac323ad","first_seen":"2026-07-28T11:27:58.668641Z","last_seen":"2026-08-12T01:21:00.227825Z","times_seen":68,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/blackjack.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.110Z","timestamp":1786490988110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/blackjack.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2635953\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-2838b1\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-2635952/2635953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458752,"size_decoded":459036,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a18fcd181cfea4160be69225336ecf82","sha1":"56fa6bb9db4728f682f902035fa6e104f2c99fb5","sha256":"641371cd59808fddce97ce06dc23f3679dec866f42b2861b52034fd6906426d8","sha512":"060de61c0b76f150df1ee16df82b82c430b19251c31870a68b21537e772af2f8e021fe539877e2b070720a4b9d956a9eadf38ab8cacce7765acdec4e5313773c","ssdeep":"12288:6lH5c8a2EZ/yDd2tUym+oC272HD+r4mt+:6x5UHZ6DktU29CyYt+","tlshash":"c6a42309564342eefd5966f7cd48e9a360302cb034b52f83f746aa61c25aa70cb377d5","first_seen":"2026-08-11T23:30:29.635896Z","last_seen":"2026-08-11T23:30:29.635896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/AviamastersBG.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.153Z","timestamp":1786490988153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/AviamastersBG.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73206\r\nlast-modified: Fri, 03 Jul 2026 10:15:22 GMT\r\netag: \"6a478bba-11df6\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73206,"size_decoded":73470,"mime_type":"image/jpeg","magic":"PNG image data, 427 x 575, 8-bit colormap, non-interlaced","md5":"b5d2095abed9fa57c8403eb6968a58f6","sha1":"c05a267c556a3369d9c4925dd24ec2c021d819ef","sha256":"0c9abe89262eb3657f0fcfa0d77fca58195a3db1b7e601aaf08e19c999fed005","sha512":"55cadcbe921939c158d7bc61848d70e2dcde1a6adab3a9a73ae94574f593b0e51d5975b2b863d2b93323f97f84234bd78ae07d2a2929a2572ffd41fac43da262","ssdeep":"1536:8BKtPskj308VgL47q50X3w8TEIoGfMxoI8S3Xr4yC:okT4L47q8w8TMG9I8h","tlshash":"636302e45c290bbecf9df03d8b9d628b8239224ce563a0e040950fee59db3e9255945f","first_seen":"2026-07-28T11:27:58.652655Z","last_seen":"2026-08-12T01:21:00.21422Z","times_seen":68,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/chunk-KILJWEBW.js","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:45.876Z","timestamp":1786490985876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /chunk-KILJWEBW.js HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:45 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6360e9-a2786\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":665478,"size_decoded":158145,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"80f44868d3c7bb28794187c5a128801e","sha1":"c61829307f8fe43e3302f74876b0f3f5027002ef","sha256":"11bfe2ff9f724b1a1244a31d684fc5db06402650c1f368976cb3a0f965a251be","sha512":"7df25d253e857671e17c0a7084440f50c6a7052a9ed249b1456c1ca68516834a4a03c262f8654e1df2389fce1a1ef56454ae3fb406a9ef69c621614d26df518b","ssdeep":"12288:sMyq4p65MYMccZrEXNWBTiffu/bowCXJCu4hOm:sMyq4p6SYMcwrEXNWBTiffu/bowCXJCx","tlshash":"7ae42bd87302b03257ae50a880b60207f7f95c854409446df6fcddee6aaec4962bbf75","first_seen":"2026-07-28T11:27:58.643208Z","last_seen":"2026-08-12T01:21:00.18097Z","times_seen":68,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/xX8HI0a7SA","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.194Z","timestamp":1786490986194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"HARICA DV TLS RSA","organization":"Hellenic Academic and Research Institutions CA"},"validity":{"start":"Wed, 22 Jul 2026 19:53:43 GMT","end":"Sat, 06 Feb 2027 19:53:42 GMT"},"fingerprint":{"sha1":"75:CC:3F:51:84:E1:7A:A6:2B:47:8E:1F:28:78:E9:35:EB:0B:56:6A","sha256":"A2:CC:68:62:C9:10:2D:0C:12:C4:CE:A8:05:CC:80:12:6A:AC:D4:4E:52:3C:77:A9:E9:51:01:8C:00:9F:7B:4A"}}},"request":{"raw":"GET /widget/xX8HI0a7SA HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6319\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"6a75a2de-18af\"\r\nexpires: Tue, 11 Aug 2026 13:56:43 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:18:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2026-08-11T22:20:19+00:00\r\nx-node: m9p-up-gc67\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18483,"size_decoded":6816,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18483), with no line terminators","md5":"fec51e4452661b8f9ef44da70093482f","sha1":"89909bad82f25d23b08c7f59da361d749195f612","sha256":"3eac18ac3e62d255f7239607b69d56b4edd10976ee000bc68033d20deef91d0f","sha512":"dca9ad3bd7bb803879d7b7fce90beb16fb07bd3321755eab8477fa0e8a4c0b9893549a304c4d94256d2751f28438f2b97d73a3f2d760835288d8fa1b55e25f16","ssdeep":"384:bofeJNQCuFmbLm0WrA8zuyEQ+EgQXDR9iqJISO9JHW8r08wI+xcXd4:bFJWA8z5EQ+EbXDr6/rp+xcXd4","tlshash":"c4821b6e7959b97383b10cf9a15f6206733549ebd404cc20a405f9897db8ade813fee8","first_seen":"2026-08-11T16:14:11.423241Z","last_seen":"2026-08-12T02:00:50.624425Z","times_seen":286,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":2,"connect":66,"send":0,"wait":67,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/online?lang=ru\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.193Z","timestamp":1786490986193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/online?lang=ru\u0026pr=dragon\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:29:46 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"325005f0f8ada5412640ce68c5213794","sha1":"b5fa73649a745333e6e8fc9e8078753d5961e80f","sha256":"921787834241536292003f66a99f5b7bde3909d9d356137d15b02d49e06c146f","sha512":"94c5e890db012c54e8000245c567e1d96e9af8e7acb9cfbc5635ec4877918cbb60f3b67d4f9374e93c39fe2c58b1eef67290a8f49c5315dc410e95e1a089e5d5","ssdeep":"","tlshash":"19a011002fc22ae0ce800aa002ac2ba028b002a32800222ae888000822a020e32ab02f","first_seen":"2026-08-11T23:29:45.449977Z","last_seen":"2026-08-11T23:30:50.533438Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.drgmoney26.com/api/translations/en?pr=dragon","fqdn":"api.drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"194.145.208.234","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:46.298Z","timestamp":1786490986298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:46:57 GMT","end":"Tue, 03 Nov 2026 15:46:56 GMT"},"fingerprint":{"sha1":"7A:21:A1:55:C0:6D:CA:1B:81:A2:A6:1B:19:18:70:61:31:95:75:EB","sha256":"85:3E:FE:C5:E9:5A:AE:5B:A7:01:E3:D4:23:40:A9:FF:9D:71:FE:06:05:9E:86:D8:E4:58:04:CA:70:50:6B:DA"}}},"request":{"raw":"GET /api/translations/en?pr=dragon HTTP/1.1\r\nHost: api.drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nskip: true\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 11 Aug 2026 23:05:13 GMT\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162057,"size_decoded":44559,"mime_type":"application/json","magic":"JSON text data","md5":"a6960409be34fbb5125edd0cfb274ae2","sha1":"2058495392d468c1cee9b99d9e265dfe7133d2ef","sha256":"2ddf7f6f32a3b43ca75741794cd1b4b5f43b887e1dfde4ba1d5e77e4dbe47492","sha512":"22ba31ab72c12235777a6eed895187fd06419f21173590d88b84c6be7dbda107efa54c38ffa3950ff7bec270df1ca1d1e5d5b3898805727ff4af2a3ff576835a","ssdeep":"3072:WK2nPOpf9tUVugpAkRdqrR+AH3hjn2kODfr+01kagFmBc:0nhVy+Ap2ffr+01kac","tlshash":"68f31a9f97c8237a178203d0fe8f7bfabb6950682311c5b4b8adc02c13599395a775d8","first_seen":"2026-07-28T11:27:58.672475Z","last_seen":"2026-08-12T01:21:00.229707Z","times_seen":59,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"api.drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.084Z","timestamp":1786490988084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://drgmoney26.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40896\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 21:43:58 GMT\r\nexpires: Sat, 07 Aug 2027 21:43:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 351950\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40896,"size_decoded":41709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40896, version 1.0","md5":"12eddf0213121e4f91df001e77f81df3","sha1":"e5c082e035855dfe917b9b6beb09b1619ff7ca45","sha256":"4a259dde317e08aa5d37e6eb684e222ae833516b2a0fccba36ee5e36224f16be","sha512":"697e4076437c88c2bfd9e1cf21559b7cb8748bdb58a07223b382efcd12340e29baa596e0ccae43b84435ad0bd345b1319b0995d7b781079f39ebcb1bf0d68858","ssdeep":"768:/CqLBM+LhchDaRFRDJqL1ElrEpUXATysVSc0LIWZez1GkbwzcRWqU+xvyVeFEucG:qihchDatD8L+lE6X/0SctW4pT8gpxvWU","tlshash":"9d03f2729267c80ae309d7fdd5dc67e63286e5b42d781336795cc04d3bf9a17022e482","first_seen":"2024-11-07T20:57:22.394931Z","last_seen":"2026-08-12T01:21:00.179051Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/assets/videos/banners/desktop/world_cup_drops.mp4","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.108Z","timestamp":1786490988108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /assets/videos/banners/desktop/world_cup_drops.mp4 HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2278122\r\nlast-modified: Fri, 24 Jul 2026 12:56:09 GMT\r\netag: \"6a6360e9-22c2ea\"\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-2278121/2278122\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655360,"size_decoded":655644,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"71e6882ac4cbe17c9afc173af48a9345","sha1":"ea6fa7cebe1c4c9b8d8a484d3f683f89ce6b5cb7","sha256":"e3c129e8933057fd498625ad7fbf19349278eecb4d364dcadf5f29c804ce24ab","sha512":"44c8415b581e8dc50ef6f4d8709cf4a1fb398f6af4e79e474d9b0b2943fcd43c21b36c84711dc12a16756920145c434229f7da35435deb1e744321b659705b94","ssdeep":"12288:Htu8kJaw3kk97o1YGhzSDkE6+B+F3e6ZIhJyzMuYoLd:Nu8kkw3kuGht1+Bee6ZSJyguxLd","tlshash":"4ad423607cdb1493d9525afb44ebc7a1e6a630e9e94488f7b831f62400d53ef5b059c2","first_seen":"2026-08-11T23:26:12.40279Z","last_seen":"2026-08-11T23:30:29.639346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/BlackjackOR.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.155Z","timestamp":1786490988155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/BlackjackOR.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89760\r\nlast-modified: Fri, 03 Jul 2026 11:38:08 GMT\r\netag: \"6a479f20-15ea0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89760,"size_decoded":90024,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x472, components 3","md5":"a181922ccec8b7b36f1a04c1a4478f37","sha1":"ca2fa9f9acbc6517ad11d1dbe26acaed54cf39dd","sha256":"2994da7f2cbe68117f703dc0ea3e4d9b656c969c42961ea73ec039950833a5f1","sha512":"2d8d7bcf2d6bd65627476a54863e06451b4c02c07a7499d05dfadfe13635ccb7c31fd5a0212d63731ac833661f0c3fcec8e4d29813ee47062b8dd72cd3fa525a","ssdeep":"1536:sayImNN3361YLBVa0xFYkz+eisHR4qPMMUgfT6lpPrtOEAh:4NBYYLja0xRGg4qPcgfG/gdh","tlshash":"b993024cc00b8369da4f74364191a9e675072d96558fcf38c88e2f0ae1eca3dd43ab75","first_seen":"2026-07-28T11:27:58.632984Z","last_seen":"2026-08-12T01:21:00.207271Z","times_seen":68,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drgmoney26.com/games/ico/RedRascalHG.jpg","fqdn":"drgmoney26.com","domain":"drgmoney26.com","tld":"com"},"ip":{"addr":"77.81.120.119","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://drgmoney26.com/","date":"2026-08-11T23:29:48.167Z","timestamp":1786490988167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drgmoney26.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 15:50:45 GMT","end":"Tue, 03 Nov 2026 15:50:44 GMT"},"fingerprint":{"sha1":"DE:3E:F6:E7:6E:6C:3D:EE:33:6D:57:87:41:8B:24:EF:05:34:EF:F8","sha256":"5F:CE:08:5A:E1:79:71:21:86:F7:9A:1A:E4:54:AC:7C:4B:65:3C:76:6E:11:A1:AA:9B:3F:1D:8B:83:92:29:95"}}},"request":{"raw":"GET /games/ico/RedRascalHG.jpg HTTP/1.1\r\nHost: drgmoney26.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://drgmoney26.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx-rc\r\ndate: Tue, 11 Aug 2026 23:29:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 85584\r\nlast-modified: Wed, 01 Jul 2026 12:00:39 GMT\r\netag: \"6a450167-14e50\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85584,"size_decoded":85848,"mime_type":"image/jpeg","magic":"PNG image data, 427 x 575, 8-bit colormap, non-interlaced","md5":"5e7534bb9b1c51dcda38ad0ee77ff5f6","sha1":"b7465f0a170abab016e5dddddd1ebed16cb0abfe","sha256":"171db930e16f81890e2d1a142298f7104640c7c8f3facafeca05494a739a7c00","sha512":"b553d12cd64a6f9e8eebe4b35cefa49344feb83854c76c331ac2f4bf36ad503d7f20e035c4e8186672ab86b6c3ffeecc8568017daa6c76e442186542984dfdc0","ssdeep":"1536:4xytTn7qCi94gCuz6xXEpo38KFdo9B0TFZfq6t0gSeELKsD40Z6oaHoOnpjk:wyJqCiDrz6xXQosKFe0hHtPcTD36oatm","tlshash":"608302944ddc7a9fe669898db44d188da0d23478a876d363038cc0ba4ecccf969d91fd","first_seen":"2026-07-28T11:27:58.658335Z","last_seen":"2026-08-12T01:21:00.232487Z","times_seen":68,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"drgmoney26.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}