{"report_id":"dc38bfd8-14a1-46d0-abab-697d71288f5a","version":6,"status":"done","tags":[],"date":"2026-01-08T16:43:14Z","url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"covid19routtcounty.com/id/auth/login","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"title":"covid19routtcounty.com/id/auth/login","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T06:46:10.361835Z","times_seen":17898807,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T16:43:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-08T16:42:50Z","timestamp":1767890570,"ip_dst":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56154,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING Suspicious TLS SNI Request for Possible COVID-19 Domain M1","source":"{\"timestamp\":\"2026-01-08T16:42:50.719769+0000\",\"flow_id\":1075910221159392,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.30\",\"src_port\":56154,\"dest_ip\":\"104.21.34.165\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029707,\"rev\":9,\"signature\":\"ET HUNTING Suspicious TLS SNI Request for Possible COVID-19 Domain M1\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_03_23\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_28\"]}},\"tls\":{\"sni\":\"covid19routtcounty.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3475,\"start\":\"2026-01-08T16:42:50.711648+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-08T16:42:52Z","timestamp":1767890572,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41270,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-01-08T16:42:52.137444+0000\",\"flow_id\":2043733856812135,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.30\",\"src_port\":41270,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.30\",\"port\":41270},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-1afacac1f4734757b0908784991abb88.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2671,\"start\":\"2026-01-08T16:42:52.130151+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"covid19routtcounty.com","ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-06","domain_rank":2246384,"first_seen":"2026-01-08T16:43:16.493074Z","last_seen":"2026-01-08T16:43:16.493074Z","alert_count":13,"request_count":13,"received_data":2093714,"sent_data":18093,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"game.ggcdn.live","ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-09T19:00:19.044662Z","last_seen":"2025-12-28T16:06:49.150305Z","alert_count":6,"request_count":6,"received_data":20229,"sent_data":2848,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db1a4e3b223eaec9e97ae7352d793020","sha1":"94aa5e20b695f3c2623bfe28788f4c5d43636faa","sha256":"95f295d607fb6401f535a1f494a4e4abd5296b7220bc871cdc597be14435c750","sha512":"460604e6f0ee0d7458f95328f99d48bf3c9a77de0e72afe02c460ff075d0e4688adb2a2c8b186b51f1fa042ccd7fd30b14d969c0169c315690b8525447593f8e","ssdeep":"","tlshash":"9141206f29b70126897370f957af500464b020173446ca593e8cd78daf22426cbfb7dc","size":2035,"data":"","first_seen":"2026-01-08T16:43:21.836586Z","last_seen":"2026-01-08T16:43:21.836586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c669865e7af20b66da3ab8713bb425c4","sha1":"1867b7080da7de1acfcbddc9e3440d875b57d69c","sha256":"4eeb307308f7ca2d12299126fa8a7b4e2e324f3a693df3033def720ffb6d8d73","sha512":"2773b6a68e861916ca9c7517642f49957b2fda66871900664ca2c0b0cdaed94ed5508ac6a8e7781f40021fcf7a7f423e7fe826311afe46bcb6624382225bf187","ssdeep":"","tlshash":"20c01201b5a87f85504da47c8d7e7686491c1e2680528aabd495442e8ba08da1e318ad","size":180,"data":"","first_seen":"2025-11-10T18:02:55.989079Z","last_seen":"2026-06-06T07:46:48.907009Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/jquery?v=Qo1RIkOIofeL_vNmFbsSQy7mhlzZKt7fB2czM6kdVMI1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a89178c6525277717ddc9c5867761e7","sha1":"57eb9fc01bd4da0ad71a0774f3d972e02b22dca7","sha256":"a3a8ff6707747bd2b6628e388491019484a2360ce8dec45371486191d0c9f81d","sha512":"acc32e07216b6c30e329e56176b5d0c39440325a0dc93d1276ac072b3e82fae6b52922230b927fdd47d9cb98ed7dc21ff65d4490ce309b753199d61e0d2796e0","ssdeep":"6144:/i8eGRuufsr5zQ47GK/yFhYh2JQRl0QRqwELm+a1jkR4Vb:/iURum05PGy2JHo+a1wRUb","tlshash":"73b46d9db11034f302ff30fa505b560851ba4e2f8e0ad804e565f8e16abdf8e6467f69","size":514898,"data":"","first_seen":"2026-01-08T16:43:21.838242Z","last_seen":"2026-01-08T16:43:21.838242Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/spanimate?v=POKt8P478B0nrxCgujEGBhaOrnFBKPn5AWSDAb9wDR01","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"306a8340ff319c9d2c58eb603d4e60cd","sha1":"286d450b56e3532eb3424afcd28d4a777547d610","sha256":"8d3099d74b6d7c1969ed63961e0e2d830fdfdb1746a8dd2923cb958ed7364d54","sha512":"c125e66eb0504641dd08e72f08e98f9ed5942ecef6ef6f2c090b3c3567d6e1fb0146a5752618fc63230b4424848afb7555ea04d8286df2213bd00e330c33377d","ssdeep":"6144:OPamY3pEtIjIy7PHFOId+lZwJHxCCIwGaMgjfspfAS2niAnRWaZJ8im9gvIu2mLz:O+pECjIyLHFOIUlZwJHsCIwGaMgjfspG","tlshash":"bb44175876a4281882e3d1e8102f0685133f789e7846ad7cbb39fcdb59a8d4c15bfb74","size":271091,"data":"","first_seen":"2025-08-14T05:12:50.824932Z","last_seen":"2026-01-08T16:43:21.839305Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91fa452cb811ebfd42913ed7aea74006","sha1":"060bc71fe2e4a1f9c98df43b6aba2b2687e12d90","sha256":"624283bdfab2d0b2de4ed2d5e1c443fc4ee513b426345414e625a8d69a058674","sha512":"c8a8fe4bf2b22533178ec9c9be10d7ea9983058b49b5c540bc481621df9e1dafd257e753546e4ce3ac231caae0f86e2e05fc4a3088b78e369607031b07d289f0","ssdeep":"","tlshash":"5441b5d936e4f9ba834328e1043fa016b6353836487be8c0531dd8f5bc38c45811afb2","size":2306,"data":"","first_seen":"2025-12-29T13:02:03.646562Z","last_seen":"2026-06-13T18:18:43.504645Z","times_seen":3819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-15T06:39:59.597697Z","times_seen":93548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"44b9fc99078bcfe4490fb15034bc1e15","sha1":"ce24732180436c239c9f7b652793636862abc0cc","sha256":"b3b902e256ff96b3cfb1ce9f97156c7c2ed18a316f2db4328df5ecbffdebe765","sha512":"6dd243ad3d514c4c174dfccc05d61de84ef7225c808b06be721ac89087cff49b3f643654a6739273bf437f20208ff2b0031552ac2f1a9c81b549cb6fad720ed8","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZm+odXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4sJ5Ar6kOx/","tlshash":"ea644bc8f183b0b606e6a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324110,"data":"","first_seen":"2025-12-29T13:02:03.642071Z","last_seen":"2026-06-13T18:18:43.524898Z","times_seen":16307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8037a412f3016d7ff6c1f6d01657b8a3","sha1":"c70120c79d7c06536b755a6bfcbd093fadfbefa4","sha256":"a53d7519bbc920dda1db13e5f6f76876b9b3cbe64fc563f6ef731cd4348bb581","sha512":"34750e8efc21d13476f79d3e6688c2e5f2e73e32dfd5ff524dfff0320ae364c28d4050ecfe4f57196a80d6f9017282c4ead35add90a3e3fd31eee4a13d06a129","ssdeep":"","tlshash":"03e028da74110c7670dd05f933b1f1297153110878092d22cdfdc91428185c74c174dc","size":342,"data":"","first_seen":"2026-01-08T16:43:21.864211Z","last_seen":"2026-01-08T16:43:21.864211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/transferwallet?v=c87MGm4A0SptD52wRVzpLmMvU3h72RQ4l9iOBVaPNRM1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd4f5ca9facc19989855f42756744f9","sha1":"a0ab5e37f444b399da7141b674642f19fb9ef7bf","sha256":"e62f726f4249d1005eb8d0bf04ab6954200a694c43b8974bd87ad295f7ad39b5","sha512":"f018c3b5d690ee29ac8b1d25131dfc26638ac0e17fb76e4e906201eda88ff1fdeb80d19cb2c0445efc73d44b212ebae91f926019a263e064777f768817a43fbc","ssdeep":"384:biQtlqctM+h8hUh04AZbY52SzyJ3Xc7nJNR/FkwymjAuzJbuaStx/NWZK7YFzbyP:biQtlqctM+h8hUh04AZbY52SzyJ3Xc7q","tlshash":"8f527775b389abda03b622f005a9566b60316f54c561cd47824bf8b3e7b7f0878a3f05","size":13273,"data":"","first_seen":"2025-12-03T05:42:24.604623Z","last_seen":"2026-08-08T10:39:40.741109Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/lottie?v=BrLQRWseRbrGLhVrXzhAiUeIVM157SS6h4jeCH-gfuU1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"63fdf264e790aa270d3b6b6d1d634c40","sha1":"7ef6c3127f788fa4d636a75c8631dc94c64c8eef","sha256":"bb51b2167a826d286ecfbf6a3396a6de5d750e44a3b3b44391ca1b34d0e78a94","sha512":"f0977045f1f4c55bedd1e5f3e251271b819c840e8bbf2485eca83ed28370e67cf29f6eec6c09f4a7a13107533ea353f6b4bbf0ce36bb054caf72b065bfe8a65f","ssdeep":"12288:Orj8/huD/rz+P7P90aZStmZc85Dg+CXB2jGzB5Pn:Os/bB35y2jGD","tlshash":"05153a5972a4243905c180a9806f0947b737292e2859c45cb76cf4efadbce8d31bfb79","size":880693,"data":"","first_seen":"2025-08-14T05:12:50.765897Z","last_seen":"2026-08-08T10:39:40.829752Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-15T06:39:59.570815Z","times_seen":67021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/692afaad4214c5197f8f3643/1jb7u6dvs","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9e95468cba7017a64447d0c55c49fe3","sha1":"940c4370a283d6cdeba3c225c4405f121c3b6fc7","sha256":"905f17975f9f25374b9fe729468d2952c85badd8fa012bf380a29ff3a3fcfe2b","sha512":"b1c97bbff40711d16f8a22532f86dc825e220d5981a9669fe4d999bd43e40cf46ff9841b8ccd3fdef3d371fc694f828ed764af40695dd316b600bf345258decf","ssdeep":"","tlshash":"5441cdd66f8f1866936410dc0cfefe0e747720fa49d86c9287080c557a666ad2f8ed29","size":2123,"data":"","first_seen":"2026-01-08T16:43:21.869034Z","last_seen":"2026-01-08T16:43:21.869034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"71c259dd3bc7f058daf5c1c0d83f840f","sha1":"6af1b33a17b074e62baefc62342a8cd218e9b0b2","sha256":"8341f6a7419deef62ab617e60b6653eebedf584ef7608ff1aff525f3a302dc48","sha512":"0091baf0d81e04adc09fc23b0a09ecfdfd35b9090af018eddb08e714c848b4c70e120f857f6feca35b7c62e6ca4a6236635612dc9baae794a2664d680227d9a9","ssdeep":"","tlshash":"dce0c6dc2940bd30966312ab20b2de8c70a23028a259e85098cf8c482a08c8ac228f48","size":334,"data":"","first_seen":"2026-01-08T16:43:21.870042Z","last_seen":"2026-01-08T16:43:21.870042Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/basejs?v=hSQljjBs43-UwNs5RKk8a2Q8HLpfhbsUnly-CIdQkrM1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ab5e493e1ca02e8c5e827fca673660","sha1":"4bad9622564ed2885bdf2c4f753f91c3c71151a4","sha256":"76131414e27833ec35008ac79a7c1218c2232b2e95e46c621348f21ad8ad4b6f","sha512":"4d776c040ab9a8c50fc6325cf818e5f08183749c56ceefb031510dd7ab15824a63fc366fa648cc06401fb129f37b68f40ca54d173fb7c2182a3e1f6f4abc35fd","ssdeep":"3072:GkHOJo1g7SV7opRBbDrtnAcKzvFYi/5uLO1aG0qFf/nHOl167:Ly/K3COVlFHS167","tlshash":"f244f84d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7ce4471bbfb9","size":261866,"data":"","first_seen":"2024-08-19T14:28:30.952424Z","last_seen":"2026-08-08T10:39:40.830522Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/casinoUGv2/home?v=cqwX0wJLuzZmSssPSAV_fDeMrYTgkzKlMi363YKyxIg1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e8248c9ea2ecb7fdc34cb23945402bf","sha1":"81197c1480aeec04a48dd117b886c9f8a8a366e1","sha256":"4ca0eb4452d6c6f509aed24bbd20658c1c60285f46be21a3d40f676362ca5eac","sha512":"13c96462e10fdcead0fbc7d905fe36b3f1638de4e452441028fa26e2c6c1b65d4f5e1096c8deff96cb5ea1c8c74fd1428018b32187265495092279fb76bdac62","ssdeep":"384:/R7BXBSqN/jKiOBqZRnBzi+FBxajKiSBqZRnBviFMFBWfPK0BeBsB9VptSYtH1ZR:/dBXBl/jKiOBqPnBzi+FBxajKiSBqPn+","tlshash":"0f52d80f70255a9b93f830b510ef96919131e7af894215083e61bd72fa24e9334dfe5a","size":14376,"data":"","first_seen":"2025-08-14T05:12:50.933092Z","last_seen":"2026-08-08T10:39:40.754934Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Scripts/notification/firebase-notification.js?EWPNAND=true\u0026EWPNIOS=true\u0026v=20260109004251;","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22b58545537cd2b66d8ae961693cea2d","sha1":"07350e7d3e388877adede3b4a885a88f18dc88f8","sha256":"7d54cc2d5ec77542917fa99728bb2573593798d065649b06fa5b6104b0e700b5","sha512":"de308f402c50dcacba492723dd7db471a0734d03d4f6577a1cc6a01e8c684437d3c3bc8487935c7d1aeefd9d78c935d7a1cac87230b4358a6710d1062cd8a839","ssdeep":"192:OuyKXEURq4wVgyY3iXUVbXn45P28Ve4oKYxqifhfO331Njw:OqXEURq4OgyAGym+TMWx","tlshash":"5632604e9096513348b3b7b8ae5b6022f5331127b749c114bb8ec7841fb6859a353eee","size":11568,"data":"","first_seen":"2025-09-12T01:39:07.017006Z","last_seen":"2026-03-12T19:06:43.991303Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Scripts/fp.min.js","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4626434c5db28b89227b39682cda189","sha1":"355984165bfe0dd654ad1c0f7ee479e0932aa147","sha256":"aa57381b057ca03eb3552d3ad0198f125346f2cc323a714997564d66e63d5eb3","sha512":"d25f071480f1d55c4a8e23ff6fa7af23e08f278b5becf7657a46b2895be0b1e320eeba35908a284f8d7b97bed4aee2c642bc65b06ff9ebe1eec0ea71594477d4","ssdeep":"96:tWT0kv7yd081Y9DSgKAI1kICF5mBqeqrxImaXSCa50sGzCUyfBI5+hNfnzteDh0c:t9ukDiWta50sGfInzXfE","tlshash":"1cc1648db3c4f37a4362ac75613f6007e37e768a5809b470c28ed5807d7998ee432a6c","size":6112,"data":"","first_seen":"2024-08-19T14:28:30.885624Z","last_seen":"2026-08-08T10:39:40.776334Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.9.0/firebase-messaging.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"98bb33bb2daf6bb901d69589090b650f","sha1":"51d2af786ff5baf67a38c907087ea208a02287b6","sha256":"95ce9b43bfd6fb021e072305431e8818755b5b620795b341a545e6b3a0dcfd08","sha512":"7acda55d7b08d90d058eb1a4af459901bfb32602dbef5123d810e22a9b9addc450648334f5f8443f368655a79a9a1b661350c50c2a32c688160285e669782c3d","ssdeep":"768:IeRTTCnBUWCTNb1zw6VMw6ZPpf0qZx8P7aeSHPXtZoFQOcezikNgfnTDcycke:VTkUWCJujvf06VQKONxx","tlshash":"89d2f8c67bf3f63357d319ab947b1101a03a9508384e8020b7ad96e67d6644aeb37f1c","size":28774,"data":"","first_seen":"2024-08-19T14:28:30.8943Z","last_seen":"2026-08-08T10:39:40.693174Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d00e512a06d054acc19a96addb5288d","sha1":"e5adc635095cf147fe47b879a1d20fce72c38559","sha256":"d2c5ac7a9661807fc0b23b16d8cb1c073fb01b023b262a0f49c646123817ad58","sha512":"6ea9eee86941f2738120391f2e31c638f01e40f3a6365f5fc1c84b310c83ba09cd2fccbfc469c4f3cdc10011e85a98277066f7382b028741a21f8380f7e1971b","ssdeep":"","tlshash":"92a0021a70c4043c259e1a4c48ddc55ab82410645a4a1481d8a4e6558f61e465960bcc","size":60,"data":"","first_seen":"2023-03-08T09:20:02Z","last_seen":"2026-08-14T15:26:11.477007Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7402df5aa1ceafb43fd80cf6abc74f8","sha1":"cf7fb26f9bb92c8af5b21dc4fe4da9fc6b82879e","sha256":"e348c09b5882eff7bd80824dd89873c06a0d8d3fdd3faf778e79bdbacffee672","sha512":"fd9c823744aac58ab4e443278edbd8d524354fb31c0f0ee66832728c22530fba53a5419a2ff8fbf5f1b8f0f183b4d5031ad597c83e37b385e0d976e22368a605","ssdeep":"","tlshash":"0af08b510ea50871fa33e4ee83a6a7040a64824bfc5bbc31316c4b4c9fcd09d80f7586","size":605,"data":"","first_seen":"2026-01-08T16:43:21.876236Z","last_seen":"2026-01-08T16:43:21.876236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/casinoUGv2?v=aybeD0ai6VUiuHeF4Mkaz7SeBU7-O5fdrl7NtnaealA1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dd7ee7573feef17528e4b88e46bbb17","sha1":"5878781f710eeb0cb754bb29f63b0b24c50b96fe","sha256":"ff6becb9d46fa604a687af0af9792a4bf1aa4910d7a6dd5fe927d8872214e1b2","sha512":"68c8951acb397825347d31021aac607aebf8cedaa53fc93316004f760d8338969400de5fc3bb4f4d45f3eb24d63b222493cd3bf32ec719a36fc1a37b2fd473e8","ssdeep":"1536:nigITMFC4dbMVRSNcgwDkYxp5+nWmcykcqMl+Eo:dVbmwOZ5xp0sMl+7","tlshash":"4e83d609f220296b42fb21b5613f160b723a2c6dd505802db968d9ee1d7dd8d203bfbd","size":83641,"data":"","first_seen":"2025-12-03T05:42:24.611255Z","last_seen":"2026-03-12T19:06:44.000072Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WPLS6GD2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"682ebd8d0cd7843feb35a758a0ce69b3","sha1":"158f9fec31727e3bb3e0b24383946c9d31bca28b","sha256":"22819aeb96d53d35310bbefaf063ad8d98e7d379f10906c9dfd85fcc03bcbc23","sha512":"944e83d6f483fd923b1ef104013a9b344c53dea7cd7c45afadb5ac900d9f97ec8f5dde31a0d123d18eee3c21ce1a167c1faecdb2987d61a3ad76b61b7bf8293b","ssdeep":"3072:N70ISEtrIxV/o4AV0PbKsB67ZKrEv5wtfvvph3rNh8nbilXJjO67gxMOTkkm1uYI:NKNV/RxEh2phZhYeXJjO67YMOTkh1uYI","tlshash":"377408cdb3ca742683a2a474503f018bb57b29d2b44cd895f186ccd42e74aaa4277f7d","size":346233,"data":"","first_seen":"2026-01-08T16:43:21.878388Z","last_seen":"2026-01-08T16:43:21.878388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://c1f31f5b-96a5-47f9-af4d-3110714ec6db/shims/firebase.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"32d439c9ec8c789e843ae58b6774681c","sha1":"deb2c661dacf46eb3a1eacbba3e430dcf10cc395","sha256":"f65e83801e16f98e150ae8843afb4c98c0b3ac0fa7fbe5a5ec687b08119732d6","sha512":"a465cd7be378feb36cce002dcf2d8bffb2b3c976a1f222afb1842f395cd027f50d5855ba00baa0b0ae2c519cee87201dce5f98ec80a466858acd4835e150543d","ssdeep":"","tlshash":"7141dd19a8746bb31533f4651b5b2402f11a80232929fcf83bac97a41fda45e80b769f","size":2341,"data":"","first_seen":"2023-05-05T23:38:25Z","last_seen":"2026-06-07T08:12:59.819288Z","times_seen":21309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca7896b5b1f061babd9d3394d94e730c","sha1":"d42700e5a637d5ad5772ab0d03d6c7aa883240cd","sha256":"c362523909ba1e387f03d6f4af51b0019653a9a9a00cd3f9e44b9a40c6a3b00c","sha512":"d22760b769a27df265c51b784991c31f9cfe9e5c206e67b6c55743b18e4784070477a7230f3ee5dfa003ba92a2ce7e9568fda5c79b915d7033f658862709b87a","ssdeep":"","tlshash":"bf01498b58e3a0465623a0789f0ba817795aa917609dde007e0c86a07f310badaf16c8","size":753,"data":"","first_seen":"2025-10-28T01:29:52.048149Z","last_seen":"2026-01-08T16:43:21.881862Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"1e532aa80bd7d24ea9a4e83e8a2a6414","sha1":"8e2d8f24e1e56f45d037cc5bffb56aced531416d","sha256":"8827c4914cb42f660726967ebb720255125a2e6022d15ba3ec81d39dfb705331","sha512":"6bccfdd17e0c3f464b4b61403534480e93366de7088d0cddd90e1f9042a445a862686878272bae735c1fccf38a9f678ff3d88341b67b73a2b9c195660ac1e4a9","ssdeep":"","tlshash":"3aa0027b23065f2249770499f8ad55c2544d257096176c253c8993c38a575052fb5532","size":72,"data":"","first_seen":"2025-10-24T12:45:50.673553Z","last_seen":"2026-08-08T10:39:40.843844Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"c88353494cfbf79a5e477a655b857f0d","sha1":"fa1873277b6bccfb25eca513e1b8978bf29abbc7","sha256":"0161002f28604ef188236bad7d93f82ee7b55c5cdcd875c20e34b36525e3e4ad","sha512":"d4557c7ee79263833d4f80152289168db975e9d4d728a8b5b53454b47aadcd5a49ebd932d0dbc98e58302fc458d1687497bb311e7a17209114dd088d896c83e3","ssdeep":"","tlshash":"e690040457000175d4dd0c0544330c100413014530731c515d5d343403400d3c4144f7","size":40,"data":"","first_seen":"2025-08-14T05:12:50.978152Z","last_seen":"2026-08-08T10:39:40.843234Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-MB887CT8\u0026cx=c\u0026gtm=4e6160","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"41b477cc2a293ce3ce0fe1071373f012","sha1":"73e55817d8a655ffc3d5f960ae7734fd9e61f44b","sha256":"8bca08e103c1902c0b6325607647236afd8b6657c6eea05594f545a5d1f13c2f","sha512":"535e552b42e5c660737dfc75cdef23c4d8475942491e46ab7551cb798c65044249ce7b932b439410722cf4c485dee266caa2080f1f1f505ccabd281311e17fae","ssdeep":"6144:lhe1EkE7wd0NV1qWCEh2phH4lhueXJjO67YM+TkYfs8hdl0vJ:ZnJhwH4nY/Tkp","tlshash":"e1841ace73c670669396a478503f018ba57b69e2f44cc895f18acce42d746aa4237f7c","size":387107,"data":"","first_seen":"2026-01-08T16:43:21.88384Z","last_seen":"2026-01-08T16:43:21.88384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-1afacac1f4734757b0908784991abb88.r2.dev/api.js","fqdn":"pub-1afacac1f4734757b0908784991abb88.r2.dev","domain":"pub-1afacac1f4734757b0908784991abb88.r2.dev","tld":"r2.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"93b61be3dc6d81627f658525a392054c","sha1":"99c5d9d0a04cb3c84a4939236793b9179cfcbb4a","sha256":"ee11a6da733e3853a5d7308ee41a1587346a718c7c7b4984b3828bf7e8a249fa","sha512":"ee2a11e8ccca22df6648bc7409b3b8710c7c643a3d3db51aa58ad28591cba22d085ebb0e476c5939057d5ca4a2f86f0c9ea7a9f00a4329b69b2c4b3224779ac6","ssdeep":"96:d0XRBL+W7vmC5OtU6RSoNGLl3XwSEUcepzQpo6vOeA1FpiW+A6QE3FB8wu5YP:d0BWIOtU6R1qlQSEUcepzQpxvOpiBEYP","tlshash":"d0f1b8167364a8658697e272023f540fb03160643486759cb27ccddeacacd8e71affb8","size":7810,"data":"","first_seen":"2023-03-12T11:57:14Z","last_seen":"2026-07-25T05:02:36.280833Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/bundles/bootstrap?v=iKdj8EE3GEDSgXjZ11X6Oex61sVNJl_UHpID6fSpQPk1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"927f2d01bc5472cd0ef4c2fda891c749","sha1":"de5537e0c4dbeeddd14b931fc5b638b6dbe260a4","sha256":"2b629b03d6bf23635adbd08bc1c69beffc9cbef42ade6607b1c1301e8d403031","sha512":"2a61aa9331cb1ab013f922c1abe2d2d55465e84b4a64b5f2353d85dbe3ee96364c650469f60d4c9fad41a26480598de3eeae5f772c26e47c2c16b7cc4fa659b3","ssdeep":"768:egnu4ImmtHVUFIEz/V7BTtWD4uEpUbs+BOquiA2r+eFJQnK9W+ieMpTHsH1Olm0J:e0uV+UFBOqtFpR8od89cvET","tlshash":"2e83d54a7254b47206df6076907f460fb2376899a50b802cb869d8ed2e7cd893177f7c","size":80934,"data":"","first_seen":"2025-08-14T05:12:50.862386Z","last_seen":"2026-08-08T10:39:40.664796Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29943a628dfac69fc98d19d5f4b29d94","sha1":"b4d8bf85c0d9b3bcca0889632f53ce4e6d37b5ce","sha256":"50feaaf52ed82d0a58307eac94e40246b1e5cf186b0653cc5d2a85001a34cb40","sha512":"fddd2b06e5a0eac89858a6e9c16eea8474859e63172fdfa48b25108814dd407998bb8bcb42ec4c33411f6ca24210732f5782a56e1f4e01fee3433b37366df527","ssdeep":"","tlshash":"78e0d8ef476d4578c6127011f636be12e4991079107659d1ec168d74ecd4f4584ab900","size":384,"data":"","first_seen":"2025-09-12T01:39:07.020716Z","last_seen":"2026-05-16T13:10:42.065604Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/sandbox%20eval%20code","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"239166f4d1bda569909c9af241098419","sha1":"ad3987a93224de5c735c7c380daf5bfaecf60ac8","sha256":"255566913e81e0587539abba68839777480779575271b734e817e7093f4dceec","sha512":"f4101528680ef26d4c38336e31d905393324e907c2d5210fd6397419e361460166a3dd44a2eb152e29d4c026c601654ea579bad6ac9608a9cd7cdf0072798ead","ssdeep":"","tlshash":"78b09b135691656d5f1065f575115007d1d9f7055bf79407b006007f1440f9a295d2d0","size":123,"data":"","first_seen":"2023-05-05T23:38:25Z","last_seen":"2026-06-07T08:12:59.811557Z","times_seen":17889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-15T06:39:59.573424Z","times_seen":93520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69525090bcf/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"890a2ff1f0bf72e7b248d102ff79740e","sha1":"201364499dd1839b7b4c491d89a865cc237063e3","sha256":"ef4ad578694c8fb01728aa2043d57113ce46d562939dad05ae75c172f4c1fb35","sha512":"15211872fb2591548ace05e32ff371957157a3a6f21e980e4f66161755aba29d1f23e53f9794ddc9c098d3e5c19895127f486114cff559ce641ee58298569721","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOQcErQYIMPdLMz9o115:kyWFW1W+fM4f8kBLMz9215","tlshash":"c234c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2025-12-29T13:02:03.600994Z","last_seen":"2026-06-13T18:18:43.537665Z","times_seen":3819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/10.9.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"528328aefa5d0fa8cab8103a39251c36","sha1":"8d663cca091b0e3079bd56023431a032546a9032","sha256":"0029d0bd7ea79d6c2d92dfc757a012fcbda936e9f4ec204f0920154499bacb73","sha512":"c300cec9efb68953f8a3f8c982e259c48367c2b59993f367e56b39b1adb001e51d77644c40ec2b2a4c41797cb446d975a8b0a387c618838cc4211f0ce2ce7401","ssdeep":"1536:BCtUaM4TKWy7CCxwUuDoYIt+/dpN/7ImzeVgHEP/JpQslIW:BCtvM4TKWy7CCxw5DoYIt+LN/7Imz4gq","tlshash":"a593a76d3bd5113306b253b86f1ba486f72e922b260692d47cac83e40f7255942f6ff4","size":94489,"data":"","first_seen":"2024-05-25T14:46:43Z","last_seen":"2026-08-08T10:39:40.658494Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"covid19routtcounty.com/Views/default/css/MemberTransaction.css","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Views/default/css/MemberTransaction.css HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 235\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 Jan 2026 16:42:52 GMT\r\nlast-modified: Wed, 11 Oct 2023 08:22:08 GMT\r\naccept-ranges: bytes\r\netag: \"1D9FC1C065A3800\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcdyyaevkNNPT4GxttdYbSULheQhi7OYxRSfBvOUjMgKsYSJVfj7Wm4S00xtEKNE12o8Irai0AgzA19lQhCzJJMKox%2ByPkJUPmc5uykIDF8yd8EU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=iPMK5Uxw78YrFLsD0ugoB.ama0ZbshgAb9lTeoPV8Ok-1767890571.785673-1.0.1.1-oKwVzdqdeV8FW2rIZQTP1HsbEjTKFyKRDDCqFi7D6OsQ1mNRAx8pybMts1cOfor53kZ13PowSUuHQipQH6Q.vaNi1LM9.yqEBzcrwljDudY6WsuRRDvVInOtOuWqiu7e; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa47b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"a87b24b98fc44463d49e726492ae8587","sha1":"aedb41230aa967f12a806ae234801bd7b9bfcc5d","sha256":"78794058adc72610981b11e3a6d80b2aa5623bebdabbdcfb96827ca75364f563","sha512":"ee2021a8d871216447f3fb50af089cac0cd2fcfdf20a3a083321e6ab0b473318e243f7492633360710a24eb1240c48c8e22d37bd56d4325042044ab414ff0672","ssdeep":"","tlshash":"d4c012489e8000055377717067f28175f1ae48f35c0890b179903442ce2c5b842e2c88","first_seen":"2025-08-14T05:12:50.874638Z","last_seen":"2026-08-08T10:39:40.769209Z","times_seen":30,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Content/css/spanimate?v=piQLNMkHF4BcQTcuDVkCe1RBee7hOyeTO_4nAQ20wdY1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Content/css/spanimate?v=piQLNMkHF4BcQTcuDVkCe1RBee7hOyeTO_4nAQ20wdY1 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8fVM7b9sVR0E%2B%2FSshfM4Kjqt6DmDPltBm4n7SJXd5m7YTU64NXY5LwwK16EZgtZf%2BOidf3IUu6IqIrCsE1HstQLXZs6Kgj6LTauJWAvvad8nKoS\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public\r\nexpires: Fri, 08 Jan 2027 16:42:52 GMT\r\nlast-modified: Thu, 08 Jan 2026 16:42:52 GMT\r\nvary: User-Agent\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=oPwSoh.6jW7.wIPX0d812QL8vPM_Wejn7NEYqnrmtUk-1767890571.785696-1.0.1.1-RHy1iH3E3.dnKr5Tb0Y7SGdXaMIZdY7MxvU42sPFjnUpE.czeRVvQNKEdPlhqyN6Cii.KDGGPZ0FRLNSoGZomOeFVVoq5qovyl1WaFzmGtLywRVixjxBWm.23vftrivZ; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa49b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28535,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28535), with no line terminators","md5":"bcd3fcb8bf380ea032a7496890b1dcc9","sha1":"a8090a3ee19730c973a9ef8256493a633c07882e","sha256":"b961ae471821aa28ae8941533c3f0c7acc092605b11d13a1e2425667573c4e95","sha512":"b9c15e14466c3e75d8b116052093fd61f8806d84ec4e220a3885d419bcaebdf07303ecd9808a3e82337b0571524bf6c528e5c56e161023b3c8da8a0ab563cb4e","ssdeep":"384:X2xHLN8N8F8uJ5iJ50J5Uxn53Ybxn53Ynxn53YToLNoLmoLj9KJ:X2xHLF5O5Q5In53Ytn53Yxn53YBI","tlshash":"3dd2679d263217d89d76d15f8e43265a1035eccffae129bcdce99e2b220a13c2063576","first_seen":"2025-11-25T16:42:48.280824Z","last_seen":"2026-08-08T10:39:40.756641Z","times_seen":27,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/esportpartner/esports-callofduty.webp","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.978Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /Content/media/esportpartner/esports-callofduty.webp HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5334\r\ndate: Thu, 08 Jan 2026 08:00:03 GMT\r\nlast-modified: Mon, 26 Sep 2022 09:01:37 GMT\r\netag: \"e4e86f6cec25e9d53cfae910b64c1e47\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 0fPLEHzdphIhYfauVhqm9H3Z9B5Esquk5Op9_Ihi0CIff-HBdwmQbg==\r\nage: 31370\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T06:46:10.361835Z","times_seen":17898807,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Views/casinoUGv2/css/black-purple.css?v=3.3.1231.46829","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Views/casinoUGv2/css/black-purple.css?v=3.3.1231.46829 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 21006\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 Jan 2026 16:42:52 GMT\r\nlast-modified: Wed, 01 Oct 2025 09:46:56 GMT\r\naccept-ranges: bytes\r\netag: \"1DC32B852DF2800\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fc8zSsz02Fh3RGgA1Vath5EitVlFVqi5WqbSl7JuSu2oi9Rp92PnKo0TbxWrGGk5nvpOyWIukd49JOb35jYMpEUOtyxohsCZRv8IJ5oxEqY2eT3Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=bn85UVA2Z7NnFf2m3.n4z890gHp2wL4u9Cfors1jT2s-1767890571.7857957-1.0.1.1-IQNBqGyRq78II9PvyGkYZVL_.Vwd3XMc2kdxL9OGjij4AhhdXepwFVD6QkfrrQI53BGjRtsIWEi5B4QkH1zf9cWt.9_DCAC5bI16AvGgTB95RQGu4wB1VJErcxmZgvr1; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa48b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72814,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (38846)","md5":"218e6e0dd22385059ddb431197dce8e9","sha1":"e1a05fd476f2a8ef84593a5205f50ed200514000","sha256":"0cf8c971562460b17e6ba88905f9ffc48f3fa802973f5171ce0d97162570f462","sha512":"e3347df5bf6e8d6565dbd2e5218020f0083ae961b646f416b9c272f7e284cb10fa178d1be14ae64ddf0b274c69b73c69defdce6d96a29fb7ae1d3088d49c68a4","ssdeep":"1536:/YiwIzevt6K+LN19usAWZRuh2Yjv76zkxycdS52b0nYg:/YiwIzwK/2Yf","tlshash":"a863ea65859b6c22fa16aa083acfd2a8376d35874c025fadb7efb4d00fd03d955b011e","first_seen":"2025-12-18T03:03:59.680899Z","last_seen":"2026-01-08T16:43:21.81072Z","times_seen":3,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Content/css/base?v=orCkVgxERMmogunzkXX2tKxE4Gnl1RpbWLunlaUvqLs1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Content/css/base?v=orCkVgxERMmogunzkXX2tKxE4Gnl1RpbWLunlaUvqLs1 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=jCPqKR2WpzGW9_GKEQK7BsFjcbbWQkDd0.UlIEPlEa8-1767890571.7804961-1.0.1.1-IChWq0ER8HL4nGFsjRmr4pRFjDfiN75yNEbOqTQfdGpjQQWyEl1ULLRL05R9OtiwDwPzzQoQ6Dnsa291BbbtfG1IjHX5nowc5WSq.9cGTE5TJDSgIJOmThPBDwi96r5l; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\npriority: u=2,i=?0\r\ncache-control: public\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Jan 2027 16:42:52 GMT\r\nlast-modified: Thu, 08 Jan 2026 16:42:52 GMT\r\nvary: User-Agent,Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nk1ekl6ATQaVTlhoqVK7vYTSJ4n2w9LPW9dqf%2FpGK%2BIOChg7z%2Bh6MdCvVxCNfyAXN70H6q7Ocg9j94xKwsX%2B0ExgKJCC8WwtMrA6lifqjdx70kU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bad2689aa43b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":951385,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (34578), with CRLF, LF line terminators","md5":"d7d2fe50ce35b6f47c6662ef2b38bba4","sha1":"d7155378339b8f1c7fb00a086ce224e1a1df4749","sha256":"d176a58b0ee7c9f185869e4b34c4195e15e6128f6ecb49bc7af3099be228d249","sha512":"133a3c19d70c654b86153f9ad6eff650650b29075f21732ba62062ab763830021d12afabed19dc11db417dc4a010258d644cb26a623c9dded0b820065474e9de","ssdeep":"24576:nrwG1ZAIkKDJ3bys5XrHec05TJ/4aTovPK/pU3DNxG5yWP5:nQ/Kv7De5yWP5","tlshash":"2315c7319511203cf5bbc1a9b8c0baac1639d017e5022efdf15af66fd6cb6e52232749","first_seen":"2026-01-08T16:43:21.811273Z","last_seen":"2026-01-08T16:43:21.811273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Content/css/libbase?v=_sjgJ3rvykvhVt8xy7AbXBoJ8BgBWSU0GdRDdZnbR-41","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Content/css/libbase?v=_sjgJ3rvykvhVt8xy7AbXBoJ8BgBWSU0GdRDdZnbR-41 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4056\r\npriority: u=2,i=?0\r\ncache-control: public\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Jan 2027 16:42:52 GMT\r\nlast-modified: Thu, 08 Jan 2026 16:42:52 GMT\r\nvary: User-Agent,Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7S1LOHE8pYT%2FwyhXsW1nOk%2FvQNtZMGQH7eg3h9PL1Qpir7Q5Yf5rLTTFXHNBFxQEg%2Fyw0FnQApvhdiFeAQQlTfV2QmFDAu07VhPSY7iFZOlHZtC9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=yA3bYCz4Ey56bSpKXhxqHkL.k0XNIN.Wdnhri1EOfa4-1767890571.7767162-1.0.1.1-1N0EBjFcvFNoocq._DUuH6NrZMnqY.zIuIvjZD1mwnevSMFh6I9kiSxO2EXmwIG75LdtmhjunZKXmobBS0ot.bcDjl2_IAgA.ViEi1.lIA0tM11Clgw4_lfGWCaUIRWg; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad26899a41b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19634,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (19206), with CRLF line terminators","md5":"e608eb0c89632733a25ca6101db118e4","sha1":"8417cf18e15e2653a9cf4811a6c2f289c8f196eb","sha256":"8d6a14256cd1a3dc0004b2e2b5eba34268db5b3ad4f251f0c295ba1ab1c69053","sha512":"50915c26b6a5bd397fc099883dab922838a271c7521976b3bf7514449d466d319a719d6385a52ab2343e4b7df3c0d5fa485efde69d9491c59a33d17c5dce4e14","ssdeep":"192:no4hnDh/TVc6jU+4v7fix43obCfCfIlSNKD:no4dDhK6jU+4vTixaACaglS2","tlshash":"3792301709a32429f62bd5a261708eb637278c07f4264fba49153e7ca3825d51df3fe2","first_seen":"2024-08-19T14:28:30.910591Z","last_seen":"2026-08-08T10:39:40.768411Z","times_seen":46,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/sportpartner/Italy_Serie_A.webp","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ggcdn.live","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:F0:B4:5B:F1:22:2F:49:4F:A1:CB:EB:5B:3F:00:15:F5:7B:94:4B","sha256":"EB:FE:AE:76:22:D3:4A:5E:93:C8:A9:E9:0E:11:F6:9D:2A:67:3C:2A:48:E8:EA:6D:CD:B5:D1:84:CF:89:2E:C3"}}},"request":{"raw":"GET /Content/media/sportpartner/Italy_Serie_A.webp HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 6988\r\nlast-modified: Mon, 26 Sep 2022 09:01:01 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\netag: \"07c62f25c32b8e1ae44e6a07583dd545\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 8TBtoX_X5LXEIMZN653-Ou_HjSrTzTj_IADFQD1IUEK-3ySaraI5xA==\r\nage: 29232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07c62f25c32b8e1ae44e6a07583dd545","sha1":"9dd184e277cb7d34bef7583043c2b5c61c7e82f3","sha256":"54045dcd6733ad339cad31370c8669a4800be7165d9784aaaae2967e10514802","sha512":"c1406c9da679f0a6a23e1e4dc858b3aeb426950d8e7cbb8fe96a87766cd837c2ecf6a2838db03a441683bbd3f42b960f92d1d521b395466c50a9ead55393a70d","ssdeep":"192:ptOztUypTw+U0ffJyASSLA+YdWPrjPsSbYdLvQN:rOz+gE45SSLoawSMdLv0","tlshash":"3fe19ea41a06fbf6c51467b0a11c0ccff8b83a291255264958185aff3e1050bcdae54f","first_seen":"2025-09-27T03:58:44.746716Z","last_seen":"2026-08-08T10:39:40.686675Z","times_seen":27,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/esportpartner/esports-rainbowsix.webp","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:52.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ggcdn.live","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:F0:B4:5B:F1:22:2F:49:4F:A1:CB:EB:5B:3F:00:15:F5:7B:94:4B","sha256":"EB:FE:AE:76:22:D3:4A:5E:93:C8:A9:E9:0E:11:F6:9D:2A:67:3C:2A:48:E8:EA:6D:CD:B5:D1:84:CF:89:2E:C3"}}},"request":{"raw":"GET /Content/media/esportpartner/esports-rainbowsix.webp HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T06:46:10.361835Z","times_seen":17898807,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Content/casinoUGv2?v=49lUzpDv7w-irNl1eAAminpHW7-9-1pHo9BVrGYE9KM1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Content/casinoUGv2?v=49lUzpDv7w-irNl1eAAminpHW7-9-1pHo9BVrGYE9KM1 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 60046\r\npriority: u=2,i=?0\r\ncache-control: public\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Jan 2027 16:42:52 GMT\r\nlast-modified: Thu, 08 Jan 2026 16:42:52 GMT\r\nvary: User-Agent,Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CT7TicKD8XJHJQv389AithZXVePD0YD0LpiQY1v3Lwk9k0q9phv1B1IVnx3TI3kZ%2Bjf1GA1qQrA8pwA1Nkj6UlTrr01pWZGa%2FzDsPyUJ1KZNPipU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=CM9qWbxWlX9c4V47r3h2imCad.X5.voDUAfV5lEeInA-1767890571.7812834-1.0.1.1-f2dBRfsYOI_qEjckVd8m7TIl9Re9MDKWNPuvPOyAjTphJ9yxmH9ZZdm6ZgMtyquxc2AsydVLvVNTPTC_ePfaguVcyX9BlnISAYe4asd46XT41d.DNurrziFkZ17H_ab7; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa44b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":210542,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (62068), with CRLF line terminators","md5":"bed4a0338d439cb8f7846de83e64327f","sha1":"4aad8456fe2446f662c37419d62b7ab0b632ae8c","sha256":"776c9f728d2a61bf91556f9690b0385ca7d37aaf149e0f66103fd3fd59d4de99","sha512":"4cd98712c46b2f2d771a183b53c7cef6e605476d11964712ea806e2060401408852695282fa98e0ec2470afb9bf2121a02b730f16e6522df436de430b3b7f9fe","ssdeep":"1536:BSydwJ6pAFohi6zDNQ//x41J9Z+2fKWezATQKLe6HyOMlB4GqRHFRLAiBcXGr0Ug:HzDYZwRDkCj2z/tb6M62HxCKoNV94","tlshash":"5424d972fa54202e707bc62aa9d0b7ec623cd112e6130bfdf616763587c61d612b7b09","first_seen":"2026-01-08T16:43:21.813254Z","last_seen":"2026-01-08T16:43:21.813254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Views/casinoUGv2/css/DailyLuckySpin.css","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Views/casinoUGv2/css/DailyLuckySpin.css HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css\r\nset-cookie: __cf_bm=X3.23NFCfgrs8FTvE1BjEd_QPV6cydSfSUCPxFQKh.U-1767890571.7857704-1.0.1.1-ButagvIgAhTnex9F0tHP9PaNZjaRLDO0FwpoVO3tscIKJ5KmcZTZpPuojuHV.zA7RAPdVi9MoUT4gIN8d8N4bl6P97dL5NXNZhGU.mIpPlfKDFnpCTBSKgjj5DhgI8.M; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 09 Jan 2026 16:42:52 GMT\r\nlast-modified: Tue, 10 Jun 2025 11:05:52 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: MISS\r\netag: W/\"1DBD9F7A111A800\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FiB%2BSgmw6gbyKrX6RoZTukoOKzX9O6sP%2BJCfLHtLZ99dkGY6gbresN0nvPygIUf53UmUbr5%2FZhgW0ffUKTFV0EkVuDTOvPxe5c1ENJYbiK4nNhs\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bad2689aa46b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":16029,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cf5fa3f25863a02b2d40cabd8ade8ccc","sha1":"809255b913d292052c40a8b26819be599979d73d","sha256":"0ce2fe347cf24e323a1dfebae15893c6b70a2dcfaa3990b92d9efbe4b4b9ece9","sha512":"f9972b5dffc4369f7e106a754086ce993403401b01e184d9a5ac45c7ed8eac015a8b9175e14ebb45f91b606f0c4b53fdfa1207f48e442287d9ea2a0dd24de292","ssdeep":"192:/PBIB3trzwMs6y063bBt1R9i9gFs8vi9gFs8Ci9gFs8Hi9gFs8rdvPmrU5W3pn07:nI8ay+VugU320GNM56","tlshash":"7972336dca120046623397786bf74628ffb420ab970276adbbdd61854ff01749272f8d","first_seen":"2025-08-14T05:12:50.821132Z","last_seen":"2026-08-08T10:39:40.832979Z","times_seen":27,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/flag/id.svg","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ggcdn.live","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:F0:B4:5B:F1:22:2F:49:4F:A1:CB:EB:5B:3F:00:15:F5:7B:94:4B","sha256":"EB:FE:AE:76:22:D3:4A:5E:93:C8:A9:E9:0E:11:F6:9D:2A:67:3C:2A:48:E8:EA:6D:CD:B5:D1:84:CF:89:2E:C3"}}},"request":{"raw":"GET /Content/media/flag/id.svg HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 16 Jun 2021 14:12:04 GMT\r\ncontent-encoding: gzip\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\ndate: Thu, 08 Jan 2026 04:45:35 GMT\r\netag: W/\"e7625a2358254597d7a5668247301baa\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: FKbKak7fKvxM14SFAyw2Tym2_PJTcRzqNYQhKrnols6UNVVd2qHAbA==\r\nage: 43038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7625a2358254597d7a5668247301baa","sha1":"f578b52246b4063b4130de624f632c0ca0ef6f1d","sha256":"df3510c880445f242e059e667d983eac08a3c4e2ed341eceb5b92fab032335a5","sha512":"d9b45ee295f5c90d50f4a373755e4499277018c1a20a1b500c00802c73abda65bbd678440f7a30de928878bb0a7916653855c0b9d1d0a46301be86ec64fe7ef8","ssdeep":"","tlshash":"4621c0a446878cf352b0d7f0cbf035aa16f052e04921d85ca737b92f301649325daeb4","first_seen":"2025-06-22T02:43:30.345273Z","last_seen":"2026-06-20T19:59:56.415536Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":528,"dns":23,"connect":1,"send":0,"wait":32,"receive":0,"ssl":430},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/auth/login","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T16:42:58.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"POST /id/auth/login HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 139\r\nOrigin: https://covid19routtcounty.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=UZB09H3htcU9b9o.MkC8FEvGSHi8X9uEB19vGilxMNA-1767890577.7227447-1.0.1.1-qhRytc_hLCSZLmRhwJHkuKM7WbpdpbkXJbuFDVMIvn4EFKnrQBVIr7b4snwP5WMDe4yM9oRAyPKICkfj4NmW9Xfu4Yg.ZtfF5EFvx_xY_vm.vThVxcN3ot29UmdqD5Bp; _ga_YV8DEZVXNQ=GS2.1.s1767890576$o1$g0$t1767890576$j60$l0$h0; _ga=GA1.1.464959265.1767890577; TawkConnectionTime=1767890577994; twk_idm_key=_PnNAG7L4ufGqYfkXFzg6\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"username=\u0026password=\u0026__RequestVerificationToken=RVBeb4WxiS4dcmZMTFVhBE2kDHS7cJByX3reQXz7rVR47juVdUofo9HA9HblPRNSQmnzDuAteLObK_e-jeEcuyv5Pcg1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:58 GMT\r\ncontent-length: 0\r\ncache-control: private\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=resADIYNhZ6uf1huFKefhAKiSMQ9AFT4Kpkh.6T2y4Y-1767890578.0869296-1.0.1.1-J9otchZ3w0ncW02vgomCRX1ev_uwWVJKYQNuoSzm4LoKtaiSF_28ukWKQQSBocdiSKuvRwsd3MypqPLojxTB4gulrbaQL3Zvw7wvd_WNunY9ufezWJ915PFBA1EG.bZt; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdLD%2B9Ei%2FGP3Gt1Bm%2Bo8713RuoJ%2FvEquVnyeJr61xW3LUTzivPMTuaElz2Ac97olUW9IpyTK1au9WlsgCq%2BUfgTdyquhibarMFq2YDOjOT%2Fn5AZu\"}]}\r\ncf-ray: 9bad26b10d4fb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T06:46:10.361835Z","times_seen":17898807,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Content/css/bootstrap?v=almlp2OgTbW2wK2fC2JTSgqtlr8VZa2kvDVZuK_ePoQ1","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Content/css/bootstrap?v=almlp2OgTbW2wK2fC2JTSgqtlr8VZa2kvDVZuK_ePoQ1 HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:51 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 45784\r\npriority: u=2,i=?0\r\ncache-control: public\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Jan 2027 16:42:51 GMT\r\nlast-modified: Thu, 08 Jan 2026 16:42:51 GMT\r\nvary: User-Agent,Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hqqcc5IV3U6hrnS4t7em0lbPa5y72OIrLtD98wD%2B%2BwvuWPNF8HlMJq5xlVSDJepN9Dq2yRz6bOQOiwFv2Fmm8E8mX2mdleDuPCz1FLtqDPa3qvq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=vrGULcR.Xs6nsDFQg05ZkXsPzjdLvsycVKg.5aCgMyY-1767890571.776781-1.0.1.1-qHvsJnOluek9OZBNKj2ZHB0PCyKQgh1tEXINAfAs.8_sQFZ77ptO0LREtVLGIqCuhXwfurT9ouHUpIGDQKNaYY9LHD0AD0cvqoePUhDuxoQpyTmlrZzUbw9JnNBUyS0V; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:51 GMT\r\ncf-ray: 9bad26899a42b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65314), with CRLF line terminators","md5":"9854c647bb31e9d3f1103179cda2dcf8","sha1":"4661afec559d48bb93b08fc61be9189b880f2c3d","sha256":"e1bf7f2bf82fb80b19cc73327009886ed94e46d5c6c3c0c6751b839a1b49e833","sha512":"201e0c2be368ec1771683e702951e3d787bcf7ea195386019aac1b5580e1f37910bade960028b825823dd230625f036b2fca8e3bb845d35a5032bf3da4560e10","ssdeep":"3072:+BlO9+Oax88kZENM6HN26owFiS22l7pHV:+BEcOax88kZENM6HN26OS22N","tlshash":"601484a6f45420dda363c10ea6c0bbbd157fe259d6110efaf41b3b684ac52c609a3f5c","first_seen":"2025-08-14T05:12:50.832415Z","last_seen":"2026-08-08T10:39:40.561197Z","times_seen":71,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/id/","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T16:42:50.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /id/ HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCFwe5OUC70%2FSg89MTjrwJzXFH1MdNO4F8UaqFyDVEKdZUugM2d8XaQ7loQKmJhCpVah5UZuSJgsUAuFrAVapYKBoubF9vEpxDvmzKisqM3yJ%2FoN\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: DYNAMIC\r\nset-cookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; expires=Thu, 08-Jan-2026 18:42:51 GMT; path=/; secure; HttpOnly; SameSite=Strict\nHamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; expires=Thu, 08-Jan-2026 18:42:51 GMT; path=/; secure; HttpOnly; SameSite=Strict\n__RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; path=/; secure; HttpOnly; SameSite=Strict\nL=id-ID; expires=Fri, 08-Jan-2027 16:42:51 GMT; path=/; secure; SameSite=Strict\nafbggC=q52zl5s3fjhd4i11yo0oxdut; path=/; secure; HttpOnly; SameSite=Lax\n__cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:51 GMT\r\ncontent-encoding: br\r\ncf-ray: 9bad268308b07130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565871,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (308), with CRLF line terminators","md5":"d515ab174ad4302cc477c4b76a84352f","sha1":"e2cde8270ceb9d4e72f2575ceb5ce7189c9171ed","sha256":"4054371fa65e01debd6e995851d9b5cd0fb0b4148f4ac1ed50d5d5a176c71f1b","sha512":"54aa7bed590edbaa6f46611cd046826120eb5f4c245c406e42531c77afe8e96b29c4d0ca8832cb232576b4365d9c60218f6070ebbaac3da7ef1d72b458856574","ssdeep":"","tlshash":"9c117af354056c8a036082666cd2706cc557169f198aad33b5cd152b2bb2b76067202f","first_seen":"2026-01-08T16:43:21.831876Z","last_seen":"2026-01-08T16:43:21.831876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Scripts/notification/firebase-notification.js?EWPNAND=true\u0026EWPNIOS=true\u0026v=20260109004251;","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Scripts/notification/firebase-notification.js?EWPNAND=true\u0026EWPNIOS=true\u0026v=20260109004251; HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3652\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Sep 2025 09:50:16 GMT\r\naccept-ranges: bytes\r\netag: \"03cfe246f21dc1:0\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-powered-by: ASP.NET\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mfn1d0tnPxdy%2BLY8IBJFPKbnQAXPUQs3ioMifujiyh15keZlmZLPU5S9MyrNuC2%2B6x1%2BE3%2BMDZOkuagSDY7huYdMuBGV5NSZodhkjMYyoRsBRQHH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=BDkoqYrdR.yJRLhxT.bLoVw00EeJnH53hYbae1qjii8-1767890571.7890148-1.0.1.1-OjB9uFyV87Yv919Op422BaQm.6pshyDt_Kl7s0M8BLT7HF37KkQc2pg1jANsKjlu9zE6z18MdLSjeD1cqZdruuwvR5s1sZBfLZ4PTp066xHk8_CwImayxL9a4qJYIuw8; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa4ab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11571,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"22b58545537cd2b66d8ae961693cea2d","sha1":"07350e7d3e388877adede3b4a885a88f18dc88f8","sha256":"7d54cc2d5ec77542917fa99728bb2573593798d065649b06fa5b6104b0e700b5","sha512":"de308f402c50dcacba492723dd7db471a0734d03d4f6577a1cc6a01e8c684437d3c3bc8487935c7d1aeefd9d78c935d7a1cac87230b4358a6710d1062cd8a839","ssdeep":"192:OuyKXEURq4wVgyY3iXUVbXn45P28Ve4oKYxqifhfO331Njw:OqXEURq4OgyAGym+TMWx","tlshash":"5632604e9096513348b3b7b8ae5b6022f5331127b749c114bb8ec7841fb6859a353eee","first_seen":"2025-09-12T01:39:07.017006Z","last_seen":"2026-03-12T19:06:43.991303Z","times_seen":32,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/sportpartner/Premier_League.webp","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ggcdn.live","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:F0:B4:5B:F1:22:2F:49:4F:A1:CB:EB:5B:3F:00:15:F5:7B:94:4B","sha256":"EB:FE:AE:76:22:D3:4A:5E:93:C8:A9:E9:0E:11:F6:9D:2A:67:3C:2A:48:E8:EA:6D:CD:B5:D1:84:CF:89:2E:C3"}}},"request":{"raw":"GET /Content/media/sportpartner/Premier_League.webp HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 5640\r\nlast-modified: Thu, 11 Apr 2024 10:13:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: FziVCnXbsp_EBRr95rwFapgLybsXEbpg\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\netag: \"3b5c00914412d5c0dbfdc803b055fe27\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 6QBEhTd-rLYp59HzCoYF3Qc84Kl-ajCdeuTzFiCQCJt6ekCHorbJmQ==\r\nage: 50308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b5c00914412d5c0dbfdc803b055fe27","sha1":"c8efe9df833e9a513fba31376d9d984c32848e8a","sha256":"82772a2e7b186eda61dd7a79747b3c27a3f571fee02694ca563e30f2179455ec","sha512":"0161e264249733993b309bfd0ac1a8dab4081965485f97b1102dacae83ab78a937de29d251713d3b2b6bbca1648675226457f480f4caffd80a008c1c14f0442c","ssdeep":"96:RElbw+iXGpK6P9y+rxiv+rVxL5YzDSTqgXKnn7aY8M8X1mVFy8x3ftKd:8wTGpK6ldrcvkVxLyYqukneC8FmVFyYE","tlshash":"51c18e56021d3e50d165b5b038a62b73a38f0f2d9a9582eaa7e94c9323305651a4f98f","first_seen":"2025-09-27T03:58:44.942147Z","last_seen":"2026-08-08T10:39:40.571481Z","times_seen":27,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/favicon.ico","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/auth/login","date":"2026-01-08T16:42:58.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/auth/login\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=resADIYNhZ6uf1huFKefhAKiSMQ9AFT4Kpkh.6T2y4Y-1767890578.0869296-1.0.1.1-J9otchZ3w0ncW02vgomCRX1ev_uwWVJKYQNuoSzm4LoKtaiSF_28ukWKQQSBocdiSKuvRwsd3MypqPLojxTB4gulrbaQL3Zvw7wvd_WNunY9ufezWJ915PFBA1EG.bZt; _ga_YV8DEZVXNQ=GS2.1.s1767890576$o1$g0$t1767890576$j60$l0$h0; _ga=GA1.1.464959265.1767890577; TawkConnectionTime=0; twk_idm_key=_PnNAG7L4ufGqYfkXFzg6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=sQl8ISI8uRarXAVd2asjsP6jGFga0bPKBm0hhcuXdvc-1767890578.377319-1.0.1.1-mV_FKkKbOVvhmddatlPFc3vqNWpnPhMqjMvARBBs3Y_1n.bj4OGe2HKzKUjET.xWkO8tFC0Gwxrycie7c1zt7QgoMdCzBkmunzIOhgFVfggK0jYFPcGz0fMP3.hgdj8c; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:58 GMT\r\npriority: u=6,i=?0\r\ncache-control: private\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuk5pY6P2tmYL2s22SIXm4ihQnM%2FX023CJSEamJPqJU1XZ6ka1760E9xPbf0xLQOiZGT%2FA2n6LaOjKSTKfmAm5ob%2By6bhGfsOfb6eUW8RH6QqDJB\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bad26b2dd63b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"b8ff866ec56ea20b2c80c41a6502a03f","sha1":"f0b924ad78b0c3f3853a13a8e66095b6859800d3","sha256":"aa47ad4ddfba49f544d356dfca639d8b3fbe280c4d6828127eb50c1144f2ea17","sha512":"193f30b423eb11aa58c326a4e6ce269db5e487f086170f1db0f581e6f4a49bbacc111b007c973323246d9e15ddac20d22ed7016bf36fe1d2d6a8ccfd090aab4f","ssdeep":"","tlshash":"4d1110266ae3180943b14134ad807529eec16153e7278e40329d724fbff57c8cca3a8d","first_seen":"2026-01-08T16:43:21.833862Z","last_seen":"2026-01-08T16:43:21.833862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"covid19routtcounty.com/Views/casinoUGv2/css/Promotion.css","fqdn":"covid19routtcounty.com","domain":"covid19routtcounty.com","tld":"com"},"ip":{"addr":"104.21.34.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"covid19routtcounty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 20:18:27 GMT","end":"Wed, 11 Mar 2026 21:17:02 GMT"},"fingerprint":{"sha1":"D3:01:FA:53:AA:87:0D:B2:32:31:9C:B6:42:D1:10:74:61:89:C0:97","sha256":"9B:20:B8:29:51:B5:87:8A:84:FE:A8:9C:3E:02:57:A1:AD:90:A8:3F:FA:77:1B:C8:B0:26:56:0D:05:84:2B:6D"}}},"request":{"raw":"GET /Views/casinoUGv2/css/Promotion.css HTTP/1.1\r\nHost: covid19routtcounty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/id/\r\nCookie: HamburgerLoginCaptchaw2ewasjret=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; HamburgerLoginCaptcha=5b727c1fe78c4566929167914ddaf34f=eHCjhA3UQUyzdmW39Q6lFX7Dp1U7+F81cCkcnWNy3d4v1uUE19IrVOI/dLtNSC55L0Mfn5X35k8q108wxpYOvEcSIjsdUJu6YJX0rtApajobfTXphS3Yvvon+hdwG3ctZShqnz+IcUwQAIMdFZAv+Di7fqFz2WXy6XBkDQfMGiE1BZ2GF/gL6FSiu3UdCE6F4sl9PDP/UYpbWhS7a4NPag==; __RequestVerificationToken=fsQiAb0OG5G5lQcMrobukYQcUi-1Si0tdK-kca-LszqZaoZZy_CPn6zPy6ZE7sZcU8RiYyFyFFppkYnRdYuPgJm7OMo1; L=id-ID; afbggC=q52zl5s3fjhd4i11yo0oxdut; __cf_bm=nHbc0cKbWRFhBreWruZ24jsZBTcceqeHnBW7q_x1.XY-1767890570.7301257-1.0.1.1-emPgGPTaRYqhm5mpzsosGcf5lmAhAHhADoStJ8ptgRJ7FHuWwySSLVeCd714DuOBw4kf5HQOxNEXrsKTVH.SLLyamvt4jQ7IHw15.uFSqVxJfIhe.6oPwHMNRF4eE4Rq\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 16:42:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 1237\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 Jan 2026 16:42:52 GMT\r\nlast-modified: Tue, 05 Nov 2024 12:43:06 GMT\r\naccept-ranges: bytes\r\netag: \"1DB2F8042C3A900\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1xSuQMqazI7CbgopMq1XNfwh5WKP7WKaeTTlb%2BoCLOEQ1bJQlW%2FQj6mZV5Y2E3ah1TrnKcaX4tQBcLXXwA04ht8J%2FZxl5qPoYQC1F9J54seiv8P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: __cf_bm=WORQRBfGXbmZ4FafZJca4ZSsQ6l0yBpiNYegTiIukco-1767890571.7853806-1.0.1.1-.1Bw137KPVayoQ0MsjSr96RavyB6A9KXd7EmBvIfhFSbNh3hshXS5NhSKTlOgANtldXJlYPUl4o7eVPTlVy8.NIcgmP3ELY4_K.O_6pAngbXhQls7jXgTFiJw2jOh4Qt; HttpOnly; Secure; Path=/; Domain=covid19routtcounty.com; Expires=Thu, 08 Jan 2026 17:12:52 GMT\r\ncf-ray: 9bad2689aa45b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":3204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e4c68e7aa7bbe10dca45dd73cb101093","sha1":"3ce676fb637e2ee78b0cc644718854d39a48cb2e","sha256":"ec9b2e536cc61fc47150022081aaca22b935ef906780b94ba092d8e512f9ec42","sha512":"58dd708e3a949ceb669b37c6614475730344ad49abb8cde01dcfd982ec02b2e894c91dd0ec6ee034660959035087772bd8cc2151afc99f896de0cb9a72b5b81c","ssdeep":"","tlshash":"8061c99cc6231147e1339f7c5fa151d1eb9c20a7d68182a8becdd218cffa0299561f8c","first_seen":"2025-08-14T05:12:50.898244Z","last_seen":"2026-08-08T10:39:40.753189Z","times_seen":27,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"covid19routtcounty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"game.ggcdn.live/Content/media/sportpartner/laliga.webp","fqdn":"game.ggcdn.live","domain":"ggcdn.live","tld":"live"},"ip":{"addr":"54.240.174.34","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://covid19routtcounty.com/id/","date":"2026-01-08T16:42:51.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ggcdn.live","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 01 Nov 2025 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"47:F0:B4:5B:F1:22:2F:49:4F:A1:CB:EB:5B:3F:00:15:F5:7B:94:4B","sha256":"EB:FE:AE:76:22:D3:4A:5E:93:C8:A9:E9:0E:11:F6:9D:2A:67:3C:2A:48:E8:EA:6D:CD:B5:D1:84:CF:89:2E:C3"}}},"request":{"raw":"GET /Content/media/sportpartner/laliga.webp HTTP/1.1\r\nHost: game.ggcdn.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://covid19routtcounty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 3816\r\nlast-modified: Mon, 26 Sep 2022 09:01:04 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 08 Jan 2026 03:34:54 GMT\r\netag: \"e571c639eed9d090ce1b17a7c95d7253\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: idFCEx9ky5yxpUQFTC7qXr17WxDXnH15WgFYKryUbs-hXXrAdds5WQ==\r\nage: 47279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e571c639eed9d090ce1b17a7c95d7253","sha1":"e8a1b7d856f501a93f925a0373694da2529de08a","sha256":"d3ea19821479cca56e65e5b19bc726e29e3dd24fb59cb9d79243f7d62f9f36ad","sha512":"f1a9439829a07cd7f55b412e2554d32ccd2f879f5738b702f55d1c1b355f1248c891c2c285fab71208760e4417e6df446a124c6cb265b3c0596f1c78fe92ed16","ssdeep":"","tlshash":"48716d61b3780398e939bfbc27dd63e57a9abe120d9be37754a505620536d34ce0c20e","first_seen":"2025-09-27T03:58:44.717958Z","last_seen":"2026-08-08T10:39:40.679107Z","times_seen":27,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":390,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"game.ggcdn.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}