{"report_id":"cae43775-f49f-4d9f-9f8c-8382f776c113","version":0,"status":"done","tags":[],"date":"2026-09-28T01:35:32Z","url":{"schema":"http","addr":"playgym.io/","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":0,"asn":400940,"as":"Railway","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"playgym.io/","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"title":"PlayGym — 3D boxing gym for Windows PC","dom":{"size":40988,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40955), with no line terminators","md5":"f10863bb78db28be8394f9e829055bdb","sha1":"3a35db86ff511b5dd0d1eab47b2cab2918037e47","sha256":"f2f3f721eb65af2e68135eb90c7b628c708d22c32652d08db4a10f0358a593da","sha512":"c6f95fb03f9c1baedba50ea56adabcb0b79402352d1f7506aeb981bc30142ac6be56cbab0493bf95b6e6c1d67f2e4ea3c59e009e74daf40cf4cf68e0599f93d5","ssdeep":"384:ds/hUZ0NU5grjQ+ILgzIfgO1xiA0SuACc7sJkore4tNY+Ttvw:ds6ZqzQ0I3W4oreVP","tlshash":"4503ed2db3022c22502300ce75f48279a256b7dd873568d5bd6f2efaad95e33343196b","dom_hash":"domhash4eda6120554f844a5c33b0f87fae691a","first_seen":"2026-09-28T01:34:54.935517Z","last_seen":"2026-09-28T01:35:37.478897Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"playgym.io/","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":0,"asn":400940,"as":"Railway","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-02T01:35:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":2,"received_data":11548,"sent_data":1206,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.playchange.io","ip":{"addr":"69.46.46.116","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"domain_registered":"2023-12-25","domain_rank":0,"first_seen":"2026-09-28T01:35:32.988592Z","last_seen":"2026-09-28T01:35:32.988592Z","alert_count":0,"request_count":1,"received_data":978,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"playgym.io","ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":23,"request_count":23,"received_data":325501,"sent_data":11832,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":10,"received_data":96777,"sent_data":5578,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"playgym.io/_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"883682a3cf23b3178cff64719dab325f","sha1":"6cceb285266b66d36f60f723cdce280ff3c7e668","sha256":"885d440f95c4724e8db790ba5abdb1c77b6fb9b08c3bc43f27607bd92a715935","sha512":"27b7f27464166460fb05c160dae8349f983dc0b9c62b1f7fc961e5c84cd46e2ddea2eb768914bbb469a51ec535593d945f3a04b7aae1612f29e704a46c4d9f8a","ssdeep":"","tlshash":"e480002220e80b32080088803022a802ab320203228088b08ca202ab028ac28c003082","size":30,"data":"","first_seen":"2026-09-28T01:34:54.943103Z","last_seen":"2026-09-28T01:35:37.48599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/session.CGvG3-ie.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fe2bc771d1608603fcd1676fe98b7f4d","sha1":"fa215fa9fddc40b8472c1dcd18a3d8bda4ad3849","sha256":"e90c526f6e0960c810cfcb52a2b97ef593da3e4a969e5b54273288e86928b594","sha512":"1046efca0fad648b584a46eda61537c402f10d6031afb647b1564318449f6ebfb5448b59c5c7f6aae81c4f5f5026677215998c32a46c27e06790a22b84a66447","ssdeep":"","tlshash":"e94131fb3309a635155ec3ba91ae938c6376758e7c8a546e703806443aa8d973382db1","size":2333,"data":"","first_seen":"2026-09-28T01:34:54.945015Z","last_seen":"2026-09-28T01:35:37.497068Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"playgym.io/","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T01:35:03.155Z","timestamp":1790559303155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxipsuu6-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: zknA-KFnTG-Wc3W2BhdwDg\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39966,"size_decoded":7727,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39932), with no line terminators","md5":"90e5fa66e13482bfa4f54e0325cca859","sha1":"f72aa5dff5d3ff30578c63be013bfca012b9ecf8","sha256":"4cef06fb6d242814feafa30206c83828c5e2e7c3593ccd5425a53c65bab28c45","sha512":"0b8005bc49495c93810eb286d4b226c1f130d0cc3164d549d75e4c7592e90ddb3eef1f7f1029f72050b400acb13e420ca817a96ed83a2edeac8eb4c5efaba325","ssdeep":"384:ZZ/iokvh1uzyk0fm8II4iRe7lnfuHhtYkOJLopeL981E+TtvT:ZZUoyVIxNuqope3w","tlshash":"5503102db3021c22502380ceb2f48379a165b795873578d47e6f0efa2696e33353156f","first_seen":"2026-09-28T01:34:54.950761Z","last_seen":"2026-09-28T01:35:37.48259Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-speed-bag-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.445Z","timestamp":1790559303445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /media/gym/station-speed-bag-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\ncontent-type: image/webp\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips13n8\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: UL_nQe8USOG01QMjO8poTA\r\ncontent-length: 51380\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51380,"size_decoded":51927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x540, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cfb80e6a45192a11c71b8217d6801dfb","sha1":"8cb0761f6f35c85ffd3889b113943bcd3367e410","sha256":"de6a7accfae1b0e8f68baccab1345760db1352f91840fd3502d19352ebd0cb74","sha512":"38acb70a259e9ee31f15931ec7c8625a204f9d08fed8ae20c33f70551399fcfe9245728f75180f369986ea622f6180a1560add8a6f9c48f973901b00bb3bb0cd","ssdeep":"1536:TX+WOsiEclX2WQUmbwroxknXMIZ8+bFz8kt7+rxD:jIsi9XzmkryqDFIh","tlshash":"b333f1269146b5c1f9f056bb188dc06fc92bbb00f42e67544f1785e16dd7c88eaec0ae","first_seen":"2026-09-28T01:34:54.954155Z","last_seen":"2026-09-28T01:35:37.483836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-heavy-bag-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.530Z","timestamp":1790559302530,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/gym/station-heavy-bag-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T01:35:01.802Z","timestamp":1790559301802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:01 GMT\r\netag: \"dlp8waqbxipsuu6-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: C298DXodTRumSKJ3PvyhXg\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39966,"size_decoded":7727,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39932), with no line terminators","md5":"90e5fa66e13482bfa4f54e0325cca859","sha1":"f72aa5dff5d3ff30578c63be013bfca012b9ecf8","sha256":"4cef06fb6d242814feafa30206c83828c5e2e7c3593ccd5425a53c65bab28c45","sha512":"0b8005bc49495c93810eb286d4b226c1f130d0cc3164d549d75e4c7592e90ddb3eef1f7f1029f72050b400acb13e420ca817a96ed83a2edeac8eb4c5efaba325","ssdeep":"384:ZZ/iokvh1uzyk0fm8II4iRe7lnfuHhtYkOJLopeL981E+TtvT:ZZUoyVIxNuqope3w","tlshash":"5503102db3021c22502380ceb2f48379a165b795873578d47e6f0efa2696e33353156f","first_seen":"2026-09-28T01:34:54.950761Z","last_seen":"2026-09-28T01:35:37.48259Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":107,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.349Z","timestamp":1790559302349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:02 GMT\r\netag: \"dlp8waqbxipsu\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: 4urusjltTPKSzHNYezItjw\r\ncontent-length: 30\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":604,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"883682a3cf23b3178cff64719dab325f","sha1":"6cceb285266b66d36f60f723cdce280ff3c7e668","sha256":"885d440f95c4724e8db790ba5abdb1c77b6fb9b08c3bc43f27607bd92a715935","sha512":"27b7f27464166460fb05c160dae8349f983dc0b9c62b1f7fc961e5c84cd46e2ddea2eb768914bbb469a51ec535593d945f3a04b7aae1612f29e704a46c4d9f8a","ssdeep":"","tlshash":"e480002220e80b32080088803022a802ab320203228088b08ca202ab028ac28c003082","first_seen":"2026-09-28T01:34:54.943103Z","last_seen":"2026-09-28T01:35:37.48599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.492Z","timestamp":1790559302492,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/api/release","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.545Z","timestamp":1790559303545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /api/release HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: 5uzaAUfdSUqG_wEUH4GxDA\r\ncontent-length: 95\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95,"size_decoded":505,"mime_type":"application/json","magic":"JSON text data","md5":"b5f7efc853b51ec4427d542dbcc06e73","sha1":"a3688e4cb5186bcd43ce3926a56506cc22bb6fd9","sha256":"8c1fa19bbd04708e342d25f99ea5e1c881c6871ad80ee1fc143e4dd8df6cc9b0","sha512":"c76b08adb2c3a27166bf417962c1cfaa89d7171fbcff2125d7cd4b8cda957407ba92d16630eb2f3c039905aba572192bcd338fa163e06b2e606e4e5e57d379ad","ssdeep":"","tlshash":"87b01249090618f2e30dc23c05944f03b72d0093106003443244cc26202e06b90e5403","first_seen":"2026-09-28T01:34:54.956766Z","last_seen":"2026-09-28T01:35:37.48694Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026family=Barlow+Condensed:wght@500;600\u0026family=Barlow:wght@400;500\u0026family=IBM+Plex+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.343Z","timestamp":1790559302343,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /css2?family=Anton\u0026family=Barlow+Condensed:wght@500;600\u0026family=Barlow:wght@400;500\u0026family=IBM+Plex+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Sep 2026 01:35:02 GMT\r\ndate: Mon, 28 Sep 2026 01:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/hero-1376.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.355Z","timestamp":1790559302355,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/gym/hero-1376.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-jump-rope-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.532Z","timestamp":1790559302532,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/gym/station-jump-rope-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/auth/login?prompt=none\u0026returnTo=%2F","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T01:35:02.726Z","timestamp":1790559302726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /auth/login?prompt=none\u0026returnTo=%2F HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 28 Sep 2026 01:35:02 GMT\r\nlocation: https://accounts.playchange.io/api/auth/oauth2/authorize?redirect_uri=https%3A%2F%2Fplaygym.io%2Fauth%2Fcallback\u0026scope=openid+email+profile\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026nonce=IILnWncMMCqgOAulV5oeiNcFyzYAhMYZvfNFh7OEYVc\u0026code_challenge=-MqBSdsh55TGIKeSrmq_Zfxo-P8vrCNDclNOYXnpQA4\u0026code_challenge_method=S256\u0026prompt=none\u0026client_id=JaglqeP3QFNZSlmCpyc59g\u0026response_type=code\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nset-cookie: pg_oidc=0002e511-3c56-41e7-88de-96f944208a9c; Max-Age=600; Path=/auth; HttpOnly; Secure; SameSite=Lax\nsso_checked=1; Path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: 9_MwPSgESw6hfw4so3UVLg\r\ncontent-length: 0\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pg_oidc","value":"0002e511-3c56-41e7-88de-96f944208a9c","quoted":false,"path":"/auth","max_age":600,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"pg_oidc=0002e511-3c56-41e7-88de-96f944208a9c; Max-Age=600; Path=/auth; HttpOnly; Secure; SameSite=Lax"},{"name":"sso_checked","value":"1","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"sso_checked=1; Path=/; Secure; SameSite=Lax"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/hero-1376.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.316Z","timestamp":1790559303316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /media/gym/hero-1376.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\ncontent-type: image/webp\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips1ht2\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: b3szV-MCS8ihqoBFAax-fw\r\ncontent-length: 69734\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69734,"size_decoded":70281,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1376x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a844d205b107e70161460577a6e1182","sha1":"77948cfeba6e8f706b416c2fe113be81761fd550","sha256":"3d30a09d8ace5e760084f59788402aebc833c6fc6ab230280decd716813ebe6d","sha512":"8596acdd79ff402124642630907b1132f5044f496c8d47285c74b287821417162ddd59bdde99ffd0f01d0e1d905cac8cc2cf17fd383fa46217b6300060782ac5","ssdeep":"1536:3tme9f1kUZMuShJC7G8qimFqGN9dFt/9I1UutODSLsMIGW:35rZMrhJC7GYm4W/C1UXAsJGW","tlshash":"616302838fdeb04db805360cc29e19373d0305fd9e285a5dbb96581646bd1ad281bff4","first_seen":"2026-09-28T01:34:54.95213Z","last_seen":"2026-09-28T01:35:37.487895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.425Z","timestamp":1790559303425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:22:46 GMT\r\ncontent-type: font/woff2\r\nage: 553307\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22196,"size_decoded":23009,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22196, version 1.0","md5":"81419bf5abb50ae075ddf1aee89da819","sha1":"4f0f26f139db2a7eee91dca038012399b3abdc47","sha256":"b0a8ad37ac45f5fb22ced461576db72e44e295107aad7a9c8a7a4bad728fd03b","sha512":"2445e12945aafa3ceb309e854253949361a3ce080197295d48b7b54fcc8d8cf2da24dc69dfaeb6c98c6a402742e4cc4bae2d12f57cc2ec3e79a676440fba35f3","ssdeep":"384:7wDo/T9qjZ6Qlb3pgWw/1n2vZvYUwVlykCtnexzuDDxlNN8fsbB:7wUQV626X1n2vRYUwlykMou/vN","tlshash":"04a2d084dae9716a4cc18aa602830aaddf76a048917c9f0cb5fb129d19425747f0fbf9","first_seen":"2025-09-11T18:14:34.493772Z","last_seen":"2026-09-28T09:43:44.020055Z","times_seen":12926,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/Icon.RyIq-kT3.css","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.345Z","timestamp":1790559302345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/Icon.RyIq-kT3.css HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:02 GMT\r\netag: \"dlp8waqbxips72v-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: cCMdDpZhQOeWzJ-dH4GxDA\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9175,"size_decoded":3433,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9174)","md5":"d5af802e769cd5ace4f3bed37c196423","sha1":"e39f4eca097cc9a0a5c2e6c4606709a4dbb63b55","sha256":"c08d5b65f057ec48835392fc5b2bb0ad385fc212303ca3c1d332e3a536140f12","sha512":"4994313a59c0d5e9e0024a3f85ad593b3fa7c6f924798f90ba19fa7a5556f67525c3e062f4300c1358049e56a4f464a4315b1f7d0db08686b6169fd32bb68315","ssdeep":"96:JJYqXzrJ9YvxM5HVDe9MXuuhhiDXy4ljVuQJF0+hkeKjBf4vDyoJ4NpfuNuuKu:JJYyzrfmuPJCxjH0o7c0ONW","tlshash":"9812a7e1b264b03dfc1bd8a29b8c666eb0105557cd638bf8ed82762484cb2f31b61648","first_seen":"2026-09-28T01:34:54.939427Z","last_seen":"2026-09-28T01:35:37.489574Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Anton\u0026family=Barlow+Condensed:wght@500;600\u0026family=Barlow:wght@400;500\u0026family=IBM+Plex+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.307Z","timestamp":1790559303307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Anton\u0026family=Barlow+Condensed:wght@500;600\u0026family=Barlow:wght@400;500\u0026family=IBM+Plex+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Sep 2026 01:35:03 GMT\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10200,"size_decoded":1541,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a25ffb523c6215c7c18645d512de8f29","sha1":"60a9ac87f178a637467305416f448b973741cd80","sha256":"343842dd56c5229ca84dccfbcb36d2e27e6f966a682baa30c2e628761239db7a","sha512":"dbbe450205aea14d9790a229129ac09218947dd5167855ba62fe19fca19640d7bdd520038e0c8bab24269f5ca8a2b9c830a037ba31bf9b942717bb8ddd047c14","ssdeep":"192:cqGhlShDvkWyVlL4NoPUJEpHd6YpZQxFPE26Bs3U3I9:c2Fz9A3QusJ","tlshash":"1b223092406ba000db531cc127cfbe35ee9e61917445c57aaffe2ce89c9bc252368b1d","first_seen":"2026-09-28T01:34:54.938004Z","last_seen":"2026-09-28T01:35:37.490394Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/index.Dv5tDCoK.css","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.310Z","timestamp":1790559303310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/index.Dv5tDCoK.css HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips7nb-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: d7RdBrLQQ6e23qZlH4GxDA\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9911,"size_decoded":3033,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9910)","md5":"b8b3d27e0b54261fe76086e5d4145eb9","sha1":"bbf72fea7e3a2f36f3322cf53d063c073b666ade","sha256":"d0abb8ba4be6163153f0fdaf2ebe4af8c83e799257639401a99a27e4639b7d23","sha512":"3769bba31c4cf92c7612fdab6675720e70690797a63050e457b96ea9a89c5b4efc17b5ebab694448dfd0d3718e0a2e2fe600a3fd70aa7cb213a95331558e0d6a","ssdeep":"192:1S/o39rpKvN/hFJjXoM1NvSl3nEWw+kp/iHmU+UrA:1S/6rpKvN9oM7QEx+kp/7CrA","tlshash":"2a121f2533156c94f81f541fb5f59a39e21072a28a22f1d8bc5b9eec54cb3b3363422e","first_seen":"2026-09-28T01:34:54.947522Z","last_seen":"2026-09-28T01:35:37.491237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlowcondensed/v13/HTxwL3I-JCGChYJ8VI-L6OO_au7B4873z3bWuQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.437Z","timestamp":1790559303437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/barlowcondensed/v13/HTxwL3I-JCGChYJ8VI-L6OO_au7B4873z3bWuQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22308\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:50 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 17:56:49 GMT\r\ncontent-type: font/woff2\r\nage: 553273\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22308,"size_decoded":23121,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22308, version 1.0","md5":"ba4513495282e696439a15e0c0f7784c","sha1":"0a7db4011ad8495d15f98572df81b76120c267ee","sha256":"215a93c696f442034a46fbb382958f753fda60e30490683aeea6b235fcbb2b66","sha512":"ede8bf87d44263a3daa19f86c1c0e98d5a688e987a6e9f579adc48a685dc0fc96328e88f2dbf72e52d25ea23fad9a403fb3397cd23c8d894cc7e3ab8fd4731fe","ssdeep":"384:13egjXHdAcb5H+5gOaEv72NEx7HK49DcHfnNLV/4udDaqZqex1pS0KPBa:1b75vBKmt494HfnNLtNbxfr","tlshash":"42a2e144f0e46392fda080786e8d13e8095645bf9df08a7b23736c6f306721f25dba89","first_seen":"2025-09-10T04:06:30.779038Z","last_seen":"2026-09-28T01:35:37.492373Z","times_seen":4677,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.438Z","timestamp":1790559303438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 553301\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14708,"size_decoded":15521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-09-28T04:33:04.174319Z","times_seen":4951,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlowcondensed/v13/HTxwL3I-JCGChYJ8VI-L6OO_au7B4873z3bWuQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.524Z","timestamp":1790559302524,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/barlowcondensed/v13/HTxwL3I-JCGChYJ8VI-L6OO_au7B4873z3bWuQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.527Z","timestamp":1790559302527,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-speed-bag-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.531Z","timestamp":1790559302531,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /media/gym/station-speed-bag-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-heavy-bag-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.444Z","timestamp":1790559303444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /media/gym/station-heavy-bag-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\ncontent-type: image/webp\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips12j8\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: XvEHvYI_QNi-xFF0BhdwDg\r\ncontent-length: 49940\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49940,"size_decoded":50487,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x540, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5a6827fc2342e4e8b9a306c76cf8924","sha1":"0bc920fe98cc04556933bd78f73d640e0aa8098a","sha256":"6418059bec4e9b7ffdb7fdc1d14839f2d7c2e253f376c49c4246a7139bc9c056","sha512":"4fc5a16f649d6b1c0b38768320a9309c524ee922176a362bebcd0cd983a2ee28e9724238936003704cbd7e13304ba23526e93c777d3aa5122e56bcd935292dcd","ssdeep":"1536:OaLebxxJ2r+tPAXvWKMsRPS1PejdmRdMNfsWSgi:NSbxeEwWKMFYkRdwUR/","tlshash":"2f23f1eae5110e9b27e64d3abced83df3744472951544a04a5ea64f1c427faecb30c4b","first_seen":"2026-09-28T01:34:54.94175Z","last_seen":"2026-09-28T01:35:37.49354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/api/me","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.544Z","timestamp":1790559303544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /api/me HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: kNkKpFANS26yumHsezItjw\r\ncontent-length: 31\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31,"size_decoded":441,"mime_type":"application/json","magic":"JSON text data","md5":"da2fbdbb78fdbf807ba529ea7c04a3f9","sha1":"0af6b9097fdfe8677c287210081af3ae1c0e2f0d","sha256":"2282532074a03c09a7ff8794e18c81d83b695e0d4c9ba61c5342afd5d4d2f689","sha512":"dc3b81b793b1f2dc7769d3674072b24caecb37ea102010c703a31e87a902d39b379c8264d64f76ad674a07469f75e96c6bab61d8b6aa934c28cc64d8e998b62d","ssdeep":"","tlshash":"028000030c0328a0a080e032c2203f3b800ca8bb82003830a8acaa0820ba2302000823","first_seen":"2026-09-28T01:34:54.958323Z","last_seen":"2026-09-28T01:35:37.494308Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/favicon.svg","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.661Z","timestamp":1790559303661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips6s\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: O-ruItrMSQO9r8UBHn5Ytg\r\ncontent-length: 244\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9806a589aa0e354ceb30c9fc9c0c5a1c","sha1":"8758387086f68b5265574e8795a28e5d73584dd4","sha256":"5ad2423d5529c325738bb6cbda3cad805082ab34b909f40273b71d0112888f51","sha512":"339a629a5f0c856226a8c0b4818febbe4fdb849f265c90a2a0572b4b528d9a7c0a265afece928a84426b62e8c409c113cea60561220baf360fb53a1150a0e9de","ssdeep":"","tlshash":"16d09595b194571cd1c44e16635574191b4d18cc9fc1442ef4d01119344f9b3a48429c","first_seen":"2026-09-28T01:34:54.94633Z","last_seen":"2026-09-28T01:35:37.495019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/index.Dv5tDCoK.css","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.347Z","timestamp":1790559302347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/index.Dv5tDCoK.css HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:02 GMT\r\netag: \"dlp8waqbxips7nb-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: T-R_mQ4QQRuIWKLJqmzx2A\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.493Z","timestamp":1790559302493,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/media/gym/station-jump-rope-960.webp","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.446Z","timestamp":1790559303446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /media/gym/station-jump-rope-960.webp HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=604800\r\ncontent-type: image/webp\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxipspye\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: lcfxoYZ1SZunkjF2jVra_w\r\ncontent-length: 33638\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33638,"size_decoded":34184,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x540, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b3321baab06d45d45cb675e6cfbd8a1a","sha1":"0d40dee2698b5623ca69697f50d9daf28c77179a","sha256":"7e22891bef6765d584ca4e2b5834fa992c048f40750d9a4e7ef85ddcb28cfa7f","sha512":"68f13b010999d5a2d2d45f9f1b51f29ec1e403430fd04857b747a786871f0563ee3218610db53d025112159cb8f0dd998ceb2a5385cb0e37393803bf4f68f303","ssdeep":"768:6GvsZa6OhXFBe/4YQEA+Kstze0Mc9zQNW/sz7XqEymam:6GvOshVBeAolBe0K4/a7XOmB","tlshash":"00e2f14ed1330c189e875fe36f44947c69a723c881cf1ce2dd96682bde56958b43f21a","first_seen":"2026-09-28T01:34:54.955481Z","last_seen":"2026-09-28T01:35:37.495748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/Icon.RyIq-kT3.css","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.309Z","timestamp":1790559303309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/Icon.RyIq-kT3.css HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips72v-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: IJJUabSnRfeOq_n-BT7zVQ\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.aydy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9175,"size_decoded":3433,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9174)","md5":"d5af802e769cd5ace4f3bed37c196423","sha1":"e39f4eca097cc9a0a5c2e6c4606709a4dbb63b55","sha256":"c08d5b65f057ec48835392fc5b2bb0ad385fc212303ca3c1d332e3a536140f12","sha512":"4994313a59c0d5e9e0024a3f85ad593b3fa7c6f924798f90ba19fa7a5556f67525c3e062f4300c1358049e56a4f464a4315b1f7d0db08686b6169fd32bb68315","ssdeep":"96:JJYqXzrJ9YvxM5HVDe9MXuuhhiDXy4ljVuQJF0+hkeKjBf4vDyoJ4NpfuNuuKu:JJYyzrfmuPJCxjH0o7c0ONW","tlshash":"9812a7e1b264b03dfc1bd8a29b8c666eb0105557cd638bf8ed82762484cb2f31b61648","first_seen":"2026-09-28T01:34:54.939427Z","last_seen":"2026-09-28T01:35:37.489574Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.426Z","timestamp":1790559303426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/anton/v27/1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:58:57 GMT\r\nexpires: Tue, 21 Sep 2027 15:58:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:32:15 GMT\r\ncontent-type: font/woff2\r\nage: 552966\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18612,"size_decoded":19425,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18612, version 1.0","md5":"912c3c9f2621e1b6f8bc0b6c8c1dde27","sha1":"b9beea08045a9cbadc819734ff402abe8c081bfb","sha256":"d0fa07ff63dd60cbc0e2f58e29c802dca2a5ae0276c999f59c6111ab7bbaec3b","sha512":"4e863160381eef28a10e3a7c51ccc6b23cd3f56ebea6612ecdbbf5fd89304f54d2254e3e9078fa5ddabc433764e174d45fd1885841135fb65f33d20d56195fb8","ssdeep":"384:CAssOmx/NqZjQxV2TegKmq8vYxp1tpubA6TyDMHM+OGD5J:C7mx/NqZjQxVYNKPnZ6TyDMHM+bVJ","tlshash":"7182e092cc6c880fd48d14ee865171b76fc96fe10221feec9826e911a19ee09d6d01be","first_seen":"2025-09-17T01:49:45.641161Z","last_seen":"2026-09-28T02:38:13.025959Z","times_seen":7157,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/session.CGvG3-ie.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.433Z","timestamp":1790559303433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/session.CGvG3-ie.js HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: zstd\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxips1st-zstd\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: tmHuc4sqS2COqwIbBT7zVQ\r\ncontent-length: 1158\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2333,"size_decoded":1743,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2327), with no line terminators","md5":"fe2bc771d1608603fcd1676fe98b7f4d","sha1":"fa215fa9fddc40b8472c1dcd18a3d8bda4ad3849","sha256":"e90c526f6e0960c810cfcb52a2b97ef593da3e4a969e5b54273288e86928b594","sha512":"1046efca0fad648b584a46eda61537c402f10d6031afb647b1564318449f6ebfb5448b59c5c7f6aae81c4f5f5026677215998c32a46c27e06790a22b84a66447","ssdeep":"","tlshash":"e94131fb3309a635155ec3ba91ae938c6376758e7c8a546e703806443aa8d973382db1","first_seen":"2026-09-28T01:34:54.945015Z","last_seen":"2026-09-28T01:35:37.497068Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/session.CGvG3-ie.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.479Z","timestamp":1790559302479,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /_astro/session.CGvG3-ie.js HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:02.526Z","timestamp":1790559302526,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.311Z","timestamp":1790559303311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /_astro/Base.astro_astro_type_script_index_0_lang.yJ0mXi6d.js HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sso_checked=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\netag: \"dlp8waqbxipsu\"\r\nlast-modified: Sat, 26 Sep 2026 12:26:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: 6gMc-q8RSl6eQqEpqmzx2A\r\ncontent-length: 30\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30,"size_decoded":604,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"883682a3cf23b3178cff64719dab325f","sha1":"6cceb285266b66d36f60f723cdce280ff3c7e668","sha256":"885d440f95c4724e8db790ba5abdb1c77b6fb9b08c3bc43f27607bd92a715935","sha512":"27b7f27464166460fb05c160dae8349f983dc0b9c62b1f7fc961e5c84cd46e2ddea2eb768914bbb469a51ec535593d945f3a04b7aae1612f29e704a46c4d9f8a","ssdeep":"","tlshash":"e480002220e80b32080088803022a802ab320203228088b08ca202ab028ac28c003082","first_seen":"2026-09-28T01:34:54.943103Z","last_seen":"2026-09-28T01:35:37.48599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://playgym.io/","date":"2026-09-28T01:35:03.440Z","timestamp":1790559303440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://playgym.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:22 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:07:53 GMT\r\ncontent-type: font/woff2\r\nage: 553301\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14888,"size_decoded":15701,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14888, version 1.0","md5":"b1c8a895f5fd3fe6cbf5b4cf95c58d87","sha1":"d32f0e0701ac62043840131a800ce717a86e4ee2","sha256":"01d285447409c8a588692162439a038b8cbd7871309ee20267b0d2d91c6e8e22","sha512":"8e5f116c757f033e001d1622798ef0e689d860b6e4102c6d760398ebe653c6ec257bdcee0d8ec1ca7cf5663269ae36b79f8d44b5a0a81298c816ac5ed9a020ed","ssdeep":"192:0oK9+lgWZm57bYBeze/iw+Lp3HIpY4uY8rHcT1DHC4cIIK/Cgb2n5ZXwMEBHr5F3:9K+nro0uYQ6cECVnTXwRtQnyYS5qb/f2","tlshash":"f962be3785690217eb1df96f6133e205ccdede83877bc23262b2955b01cfbea5019255","first_seen":"2025-09-19T17:22:27.509445Z","last_seen":"2026-09-28T06:53:09.86911Z","times_seen":2892,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.playchange.io/api/auth/oauth2/authorize?redirect_uri=https%3A%2F%2Fplaygym.io%2Fauth%2Fcallback\u0026scope=openid+email+profile\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026nonce=IILnWncMMCqgOAulV5oeiNcFyzYAhMYZvfNFh7OEYVc\u0026code_challenge=-MqBSdsh55TGIKeSrmq_Zfxo-P8vrCNDclNOYXnpQA4\u0026code_challenge_method=S256\u0026prompt=none\u0026client_id=JaglqeP3QFNZSlmCpyc59g\u0026response_type=code","fqdn":"accounts.playchange.io","domain":"playchange.io","tld":"io"},"ip":{"addr":"69.46.46.116","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T01:35:02.857Z","timestamp":1790559302857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.playchange.io","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 09:48:09 GMT","end":"Wed, 23 Dec 2026 09:48:08 GMT"},"fingerprint":{"sha1":"B4:34:19:2D:BD:F0:A3:AC:B3:61:D6:AA:63:AC:0F:98:8B:52:F9:4F","sha256":"72:82:B2:3C:4E:69:A9:FC:DE:57:84:8F:3D:D2:63:E5:90:94:83:7B:1B:F5:FA:2C:09:3D:40:C6:05:7A:E0:02"}}},"request":{"raw":"GET /api/auth/oauth2/authorize?redirect_uri=https%3A%2F%2Fplaygym.io%2Fauth%2Fcallback\u0026scope=openid+email+profile\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026nonce=IILnWncMMCqgOAulV5oeiNcFyzYAhMYZvfNFh7OEYVc\u0026code_challenge=-MqBSdsh55TGIKeSrmq_Zfxo-P8vrCNDclNOYXnpQA4\u0026code_challenge_method=S256\u0026prompt=none\u0026client_id=JaglqeP3QFNZSlmCpyc59g\u0026response_type=code HTTP/1.1\r\nHost: accounts.playchange.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-security-policy: default-src 'self'; style-src 'unsafe-inline'; form-action 'self' https: http://localhost:*; frame-ancestors 'none'; base-uri 'none'\r\ncontent-type: application/json\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\nlocation: https://playgym.io/auth/callback?error=login_required\u0026error_description=authentication+required\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026iss=https%3A%2F%2Faccounts.playchange.io%2Fapi%2Fauth\r\norigin-agent-cluster: ?1\r\nreferrer-policy: same-origin\r\nserver: railway-hikari\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-railway-request-id: kK5w5dLmQzyyGPhEg4a9AQ\r\nx-xss-protection: 0\r\nx-railway-edge: ams1\r\nx-hikari-trace: ams1.b55h\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":128,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playgym.io/auth/callback?error=login_required\u0026error_description=authentication+required\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026iss=https%3A%2F%2Faccounts.playchange.io%2Fapi%2Fauth","fqdn":"playgym.io","domain":"playgym.io","tld":"io"},"ip":{"addr":"69.46.46.59","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T01:35:03.032Z","timestamp":1790559303032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playgym.io","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Sep 2026 08:52:27 GMT","end":"Wed, 23 Dec 2026 08:52:26 GMT"},"fingerprint":{"sha1":"EF:C4:59:93:18:09:C9:85:8E:C4:91:DE:C7:19:96:0D:A7:B6:E6:73","sha256":"47:6F:FB:18:9C:F1:96:C1:12:FF:91:37:47:2F:27:E7:31:B8:31:08:6C:3F:C1:CB:69:C6:4C:20:E0:C9:AE:86"}}},"request":{"raw":"GET /auth/callback?error=login_required\u0026error_description=authentication+required\u0026state=XniYex9VH34SOa3xkmnaNMJMnc2pUcbanewCh_rhbQE\u0026iss=https%3A%2F%2Faccounts.playchange.io%2Fapi%2Fauth HTTP/1.1\r\nHost: playgym.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://playgym.io/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pg_oidc=0002e511-3c56-41e7-88de-96f944208a9c; sso_checked=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 28 Sep 2026 01:35:03 GMT\r\nlocation: /\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: railway-hikari\r\nset-cookie: pg_oidc=; Max-Age=0; Path=/auth\r\nstrict-transport-security: max-age=31536000\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-railway-request-id: IB-cYlubQGu6nz3-BT7zVQ\r\ncontent-length: 0\r\nx-hikari-trace: ams1.aydy\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"pg_oidc","value":"","quoted":false,"path":"/auth","max_age":-1,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"pg_oidc=; Max-Age=0; Path=/auth"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T09:46:40.391996Z","times_seen":18704851,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"playgym.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
