{"report_id":"e6bc0d6a-a883-4af8-9ff5-bcb726b5b789","version":0,"status":"done","tags":[],"date":"2026-09-17T13:35:12Z","url":{"schema":"http","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":0,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"final":{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"title":"Garena Free Fire. The best mobile Battle Royale game!","dom":{"size":90522,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (760)","md5":"36e180703975a802b54725a10dc4faf8","sha1":"a41fd06efd4a0959d27a96363f5b8cea1847410f","sha256":"e406ccb397c9cf760483e07fe8229c37429f4f05f2a85ce80d87559ff84c18c1","sha512":"1a3821fdec9b4ec3ac4c18b8e6f0f5df05d1df26ee6aa8c867c281fc396eeb35da218b68a1ccef9721678e0bf1899f759c0e13e8ddf748ead50c46d7a088130c","ssdeep":"1536:rZ5jjUY4heYKNP6CDvreNJJ8jd3dQZxS7Y2jvtcDouOI9q+k0GAGmIZ9jV:fUY4heRNNLPd3dQZxS7Y2jvtzrAGTZ9Z","tlshash":"0593b841a1a528730813c0fd62ba8a0a35ed9513d7078e0876fc97dc7fcaf95ad73998","dom_hash":"domhash7b0ddb6a3b20bb3e8d685a528e152a28","first_seen":"2026-09-17T13:35:33.198117Z","last_seen":"2026-09-17T13:35:33.198117Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":0,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T13:35:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":3,"received_data":326059,"sent_data":1714,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":3,"received_data":29344,"sent_data":1581,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ezzygacod.ezzzyy.de","ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":114,"request_count":38,"received_data":3864099,"sent_data":19522,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"freefiremobile-a.akamaihd.net","ip":{"addr":"2.23.13.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2009-09-14","domain_rank":391356,"first_seen":"2017-11-25T21:17:31Z","last_seen":"2026-09-09T21:17:33.24178Z","alert_count":0,"request_count":1,"received_data":1863,"sent_data":591,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-09-14T13:37:51.383656Z","alert_count":0,"request_count":1,"received_data":31906,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-09-14T08:46:41.386609Z","alert_count":0,"request_count":3,"received_data":264144,"sent_data":1470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.pubgmobile.com","ip":{"addr":"23.214.96.141","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2017-10-18","domain_rank":76737,"first_seen":"2018-04-27T11:06:13Z","last_seen":"2026-09-09T21:17:32.811497Z","alert_count":0,"request_count":2,"received_data":2635,"sent_data":1120,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-14T00:42:22.155493Z","alert_count":0,"request_count":2,"received_data":183892,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"4705979fe9124f133f342002d629fbdb","sha1":"d737c386ce3d59869ec72f441ef393df7c0d2750","sha256":"6f8062f8da2688e799db6a48307a9911526b18393bcc68242b03ec190aeb89c3","sha512":"9b14cc4100bfdb90465ec6a9c700d28debd41e79f20fb3a3b543aaa3d9af661e75de2d093ed161d352da8125bd8e68ea12a384efdfff213cd75e421470a65e77","ssdeep":"192:8yf+obXIi7IscpSk/S03+eN2zSFRshVRdyQRawyQdujiId:8yrrl1suS2uFRODa6ux","tlshash":"41124408f5f72a105533907a17b7d0097b2d801b9a0acb04792d57882f55f5afaf1baa","size":9724,"data":"","first_seen":"2026-09-17T13:35:33.279136Z","last_seen":"2026-09-17T13:38:39.307222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2458d797ec285cd6270f6eb381efcc8","sha1":"ad6969ad818cbf60239e3053dfa88a2410c9800c","sha256":"acf49bd9fc81f073aad64b1e60f96c4f9b43a13dbe26c6997e08688c252a71ae","sha512":"a62b85d31f45ce04cea1e93d68a7877201c37cc7570b2451b97de14f73ae74fb13bb2c512c60b7b35571a3a55d0f9c92a95930cd0bfd7b9bb6038faab45bee4a","ssdeep":"","tlshash":"2821b04730e21c52a917f0b9262a142e711cc907611ade103dacaaec7f32d239cb4bdf","size":1212,"data":"","first_seen":"2026-09-17T13:35:33.280245Z","last_seen":"2026-09-17T13:38:39.307865Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ce4cba731c4c151c348cad2853f1ffd","sha1":"4bcfdff7ab2577adf675c04274c04a1478370304","sha256":"ebc3350a41013f14b7189eace5675e1ec4e59954f605aaee790b5681786fafa0","sha512":"0d545c3488ba300df4aab342ad360b46bf5ba1ad6572c26a5c6ffb6ea33d1a4750563a778c8a02b24ac7b70db84eae2724d61d9e40884f4517041f022e275cfa","ssdeep":"","tlshash":"4c51bf49f6ef6d896873747a11bb910c1bac154fa508df18f86e4ec01f10629fe6358d","size":3141,"data":"","first_seen":"2026-09-17T13:35:33.281367Z","last_seen":"2026-09-17T13:38:39.308457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"693693d713eb6bae6d0eefb45ea383c3","sha1":"b4c624a953facfd6830cd1080e470869273d0bcc","sha256":"a0fb73439a92b7a0d6751977dbbbab9e03f8b8fdc501bad76fde617a51dcc5be","sha512":"ec56ad381ff40f7d922e08801f28bdf4b4e318e0a7450b4af196f0573d236deeb755850792686a026bf93df046e1aa39ca444d0c2bf6a1c7bb5b4f2149ee2e61","ssdeep":"","tlshash":"3d019c05af72283e40f7998d425b974b52333087e222e9093b0ddd601f6927437b27d8","size":786,"data":"","first_seen":"2026-09-17T13:35:33.282327Z","last_seen":"2026-09-17T13:38:39.309035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1d756e0156ce78f0151caf2b6ef8b17","sha1":"7953238ab351aaa9bec2c9fc43ab0b6882d3b14e","sha256":"67b94ff54e5ccc8b9939f6ce056ba01aa18c2e0f7745dc3da85478e3c059c925","sha512":"a1c50a1e788b3a47bf3083c3005fd9913543c6f828f6707d0e9d0715ccb3d19caa242958742b356c8bec6961cfa006a2a70c5df3765bf68510a326f612aba899","ssdeep":"","tlshash":"130197056f71283e40f7988d414ba78b62233087e222e905371dde601fa927437b27d8","size":713,"data":"","first_seen":"2026-09-17T13:35:33.283553Z","last_seen":"2026-09-17T13:38:39.309609Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4949b6477136f799b9dfea5b93c4d73","sha1":"f188f1201b2cdd1908af6b6e7d54199b518e532c","sha256":"38f149610fd92aad53d5d98d4364a1f32728db728887312b799c9a54fd3a73f9","sha512":"af84cb3f284f784dd51d3a4a8818c0e4b92ef10f260ace685fb6d422347a42e4ba6e63bfa5447d14f569d5893886660e028324c94cbbaa308d08aed4d81929b2","ssdeep":"192:Omf0MHw4ub9hOPb0PPb21J68MVv7UPx0PPbk1Ji84mHM0fHcPO+DOXsn+i0AKPFa:dQbb9hOoPHVv7UOPrM9qOo+B8","tlshash":"2c22ee0d76d7199a1a33d0be15bb4001775c685b240ace08fc6d16c46f91feaf9bacca","size":10683,"data":"","first_seen":"2026-09-17T13:35:33.284565Z","last_seen":"2026-09-17T13:38:39.310259Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"04ac75c8c9b267372666d5d93c06b292","sha1":"0172b932c997d670fd4319b241ac2aa27e83d81c","sha256":"dd4bc1bd2a32d04bc3b2df4e54422808aa6a2217194ccc63d2fa588584ae4f67","sha512":"363d45f90a47125cb3d47302a69b44fc08ee7c966506d5846cdc4cd844db5087da982129006240f7998313840918e01cde7c27672fc64b562635d7570973b11f","ssdeep":"","tlshash":"951165049b0ed665906327a8553edd4a39f0f8398219f9c03c9c8b830ee4b30a1b9cf5","size":1066,"data":"","first_seen":"2026-09-17T13:35:33.285521Z","last_seen":"2026-09-17T13:38:39.310831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"0798ad85ed460eecd43f3d515d45a812","sha1":"ed83e59ddaef68cc20aeba841994ea5b092ac2db","sha256":"956cd6474f9e0b221864bec46f84eecc5487aff98c0d89fc2aefe6a1fff99973","sha512":"4d0a6556e6de6056edb6d7723a86618129fa4763de648838f56ffeaf785fb7c90f58c79e09de23251a1f2b0bed3a410acf15c2c3c3ec5a8ae3dc3f38c722fa9a","ssdeep":"96:6FOHVNrWCI50a2kvCbvCQvClQvNZ3q/oZfxUU6YlnALmmS7zrq0fn/vw5LxALDT1:6F2Q50a2kKbKQKqlpPlnAwzrFn/8LyXZ","tlshash":"a4c1d068bdeb00551223a4754bab6206773914171080ef05ff1c5598afe8e1bffb13e9","size":6112,"data":"","first_seen":"2026-09-17T13:35:33.286356Z","last_seen":"2026-09-17T13:38:39.311421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-09-17T17:20:32.781564Z","times_seen":73145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93107,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T13:38:39.279675Z","times_seen":17340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84320,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T18:06:20.327249Z","times_seen":16770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-17T18:39:35.899596Z","times_seen":504328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84245,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T18:24:09.62105Z","times_seen":61590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/js-zone/slide-zone.js","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":false,"md5":"aff6ffab6b449f031ee8b2f0e550f7b8","sha1":"85f544cf556a48c10c754636443cc8df2f86a123","sha256":"497a23bd289b4a897294e8f9e2d083339e4efc7eb98b1e5595fbc0c83920a82f","sha512":"0d0b69f71a3d7e197b9cf4f46ce953768d3210781abcf8a6a5bb13ce14684d3c857d30b8c1c387e458d45b4cb7c8be90dd3559ddb903b0fe581e1adf10585f00","ssdeep":"","tlshash":"b6312805e4181d2c99f66638af69cd02e8fa08118e09d680fcf8a05f5fb0e1566ddef9","size":1530,"data":"","first_seen":"2024-03-29T18:37:59Z","last_seen":"2026-09-17T13:38:39.294536Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/facebook-text.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.137Z","timestamp":1789652076137,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/facebook-text.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 12239\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12239,"size_decoded":12482,"mime_type":"image/png","magic":"PNG image data, 604 x 158, 8-bit colormap, non-interlaced","md5":"c8469979cfb24192fc638efb7784a921","sha1":"ff2f9c8fdb233dc3bfabd2ecaf11cbb70791dfa3","sha256":"0cb512d932e3ad625dfb6c1ae0d47e1dfafecdf31c9c7fd9c9677c95bf31efb5","sha512":"c8c113d704a89783dde9f471022b0e31ff28d91a3c7215721888ca88f99bec20453dea73027fbdc19e5c71f822e85578fd79430db3605532d7ce2588d1a52e30","ssdeep":"192:xNjCISJry4NhSGkOLeNxXl8qhM4r+ilUdfXSjvi01Irb/mxLRxjqFli1nZ9END:xNjCISJry4hSG1eND8qBSi6dfXSjvpIb","tlshash":"c242c04a86a4132bd1ed19cd61b7102e211ebdc62837133297fcb06acd42a4fe23590b","first_seen":"2023-11-23T03:47:17Z","last_seen":"2026-09-17T13:38:39.302072Z","times_seen":203,"resource_available":false,"data":null}},"time_used":5779,"timings":{"blocked":5489,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/css-zone/google.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.965Z","timestamp":1789652075965,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /css-zone/google.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7483\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7483,"size_decoded":7725,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a603d08a14d7e2758126326a8abd8d6e","sha1":"239ba19b6e0cd1436e47f1e5d5e5954141bb5cd4","sha256":"6a21bf190d41ac197391757ba746c5626b6116665b7ecf7d25b2bd4194392f50","sha512":"21079e36713e67b4c8dc01b3e145e82657407bf2e62a060226fb6168f4e6f4bc98be52467fc8c451a6152f2d54d28f1244ca2fbe652520ce6b31790a5bff054d","ssdeep":"96:34vIQwMORAT3Ls6LCLlQMk619By6gBxOBurUXVIoC0AU/+xEaEdvhGXKK3KKk1:L4bs6LCLlQ16PBy6soC3U/+xErvhW9m","tlshash":"c2f1df5aeb10500ab132dbb8bbb24745ea5d04639b0785b97b9d6340cfb156c4371fdc","first_seen":"2026-04-26T21:55:56.416119Z","last_seen":"2026-09-17T13:38:39.303183Z","times_seen":4,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":303,"send":0,"wait":304,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/main.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.978Z","timestamp":1789652075978,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 17:32:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 62561\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":62561,"size_decoded":62803,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"f524441e2c0f8c81092872de166c769c","sha1":"c1f938eec50135b7ea08e76376fde09d21388e60","sha256":"40474ac1795fc715e84afff9936c948602e3aa4bcc34643f9473f487821d36e0","sha512":"97f61ed89168bd1b0d5496262d0c9fdaa086db33af89d1d18461bd2ee2fb405783fdb540b909b8d296f70a86146a7d63556aa4eeb9cd0c29ea68e7e4eb2f7398","ssdeep":"768:NcNpxbFSBkBbdf35W4Za55JFYcYK5P33FJ34UT4+U3TL4ipuRG7T+d1d7x9/QUT/:NINzgs5boxbY/6Im","tlshash":"8d536164ae162049f23ba5f8fbb02b66ee140403930f45fab5f47954dba153c2673acc","first_seen":"2026-09-17T13:35:33.202849Z","last_seen":"2026-09-17T13:38:39.281448Z","times_seen":2,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.981Z","timestamp":1789652075981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\nage: 2084447\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270024-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 377693, 594253\r\nx-timer: S1789652076.018695,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-17T18:39:35.899596Z","times_seen":504328,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":9,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.989Z","timestamp":1789652075989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3827011\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhDff4gyojVDAhUalQfnhhZHoUZG0YKzQ7KEeSC3OoTrbX2D3DAvkKcFgr0Hp8c7J%2F%2B1bWPAJELTrMYiFUhXhBDcgEk2xWTXH0nJZacmP6ywHHU7soK%2FhEayoWW7Q9pyvko0UC5l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c87d431e14712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18778\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":19783,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-09-17T16:39:07.787314Z","times_seen":48252,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/icon_2.jpg","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.138Z","timestamp":1789652076138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/icon_2.jpg HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 328672\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":328672,"size_decoded":328917,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"762c0d90ff7452149374a5f42ea43f91","sha1":"9efeef07b40b30ea5f0b615ffd19e996aa075f79","sha256":"a785fe88f87c4ff144035ac545c6471f8d087eaa43445e76546809c3c109ebb0","sha512":"843166571a873d352c7733479af75dc425c7d820f3f645bc6a3622da1f0d8775b4de7f19684efea544e8ba6c0d1a6d2bb515b9cb08e5b3ef8f619ab6e9161ebb","ssdeep":"6144:qx7DmGfBjbQhd0unc/+/4q0jfxw+uYA+xsWJlXCmsfyrvykjB2SCujm3iVx:Q7DDpQJc/W02+pA+xsIlXCJfGv2S5jeK","tlshash":"4b642358ec8f067e253366b42c5aa2f2d391533f3b247a526535ba8243cbd51e0b973c","first_seen":"2026-09-17T13:35:33.205913Z","last_seen":"2026-09-17T13:38:39.292702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4320,"timings":{"blocked":2867,"dns":0,"connect":0,"send":0,"wait":290,"receive":1163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/Twitter-Show-Password.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.139Z","timestamp":1789652076139,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/Twitter-Show-Password.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8467\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8467,"size_decoded":8709,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit colormap, non-interlaced","md5":"e58ab8c9dc9b456402091bbed9198647","sha1":"681838b791d579b01c97f59d507273e1bd280850","sha256":"25c782de8f6ba07c850d68722d5ae268609170783a6bd51283a2cee86c5b8efb","sha512":"d8d8da0fcb386d09b9a42ba597f5d6d2ac60d6eedf9535ef7d1ca035dfaa4a51902b218a4db776512632a52275cc81a57f987431818e01d218a4d3ad227420ed","ssdeep":"192:YPGaQqyS2e6pXLg60GtkWDLDYNhIB+Obe3RVjrpOKLGZBOIHliuER1v:YPGFqDKUutnDnYNSMWYP5PwBOIoDN","tlshash":"0402c0a9400843b4d26059feb8ba5fcac5a688ddb4d85f67ec1e3e43037d61d604b973","first_seen":"2023-07-02T16:12:44Z","last_seen":"2026-09-17T13:38:39.293388Z","times_seen":293,"resource_available":false,"data":null}},"time_used":5573,"timings":{"blocked":5279,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/media/close.mp3","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.176Z","timestamp":1789652079176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /media/close.mp3 HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10202\r\nContent-Range: bytes 0-10201/10202\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: audio/mpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10202,"size_decoded":10495,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"9348d3f465b74d585b2a1e9de00ae05a","sha1":"51bd0fc14cfc6985bf66f0ba86c068014b391961","sha256":"06a13cad73913af634994d110b013db9e7f6f5ad149e921cba4ef27ec4a2a17d","sha512":"5ccfaac1705044449f464a82e249a2722bd318c1220c008be1ba5d65abb1a9d27a6b3d748d198cfe685b5d45eac9005f4139162cbc75969a3fef6d21e8ed8043","ssdeep":"192:kTkQggm5S+ySfEPTMHgtgNoRhQNYuHQz2N2vNbjhHdaE4WMxkey2p:QXggm5VySsPdtgNoR+bM2NONZHdapW6r","tlshash":"b722b0809ba1c5ebfa0d3b3e9607f534d0e08e89ce50cbf2d8010791763f650976982b","first_seen":"2024-04-24T06:30:36Z","last_seen":"2026-09-17T13:38:39.301518Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1579,"timings":{"blocked":1289,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/google.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.021Z","timestamp":1789652076021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/google.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5664\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5664,"size_decoded":5906,"mime_type":"image/png","magic":"PNG image data, 66 x 64, 8-bit/color RGBA, non-interlaced","md5":"cd4ff185d3410ed9052bc68e7d4d3215","sha1":"9e9d601cf6b1d92bcd97ea2552791290f87a7791","sha256":"1ebc9fc493da388dfbc7c7616b83d9a340b851c9c789d758933dc0b77e4fa003","sha512":"7bd2793bc5dd212a3c151e5f9f688b57dc08a20f2e50828d37d55e71f940283a161d9c86dfe57eb6191b93216b6364f99ac0a3fe6c9e0fe29431e4b1aa618bd1","ssdeep":"96:pSHYkknmWIYm/E+kgcHn0uHcNzCgXqba6Lj6YKC4JteEGulAtfs+dA6iqbD26bgJ:pS4kknDJH0uCCgXqxeYKC4TDAt0SA/q2","tlshash":"cbc14e5bb97059117f4cf34d2ae47a257cbf270095518de6fdea4292caa01bb9b1c0c1","first_seen":"2024-04-19T05:44:27Z","last_seen":"2026-09-17T13:38:39.282636Z","times_seen":68,"resource_available":false,"data":null}},"time_used":3299,"timings":{"blocked":2988,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/index_files/css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.963Z","timestamp":1789652075963,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /index_files/css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":556,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-09-17T18:39:42.526754Z","times_seen":62541,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/css-zone/facebook.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.970Z","timestamp":1789652075970,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /css-zone/facebook.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4316\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4316,"size_decoded":4558,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"071afac36c33c23c399cd3d959db190d","sha1":"70cc3bcb724271046c4e07cd76178c957f89b233","sha256":"f9172058a07beeab92bc744c116c9798a8e103e857c69d1ae8cf301e51f94e71","sha512":"ebbce2fd77b00ec4bb478a64fc2a1931d6c0dba157df6b59d8724b724332c3689ea4a8888bf96aafa5dea297e0e9b62b69c43ab4c46f8a23f6b58fd40e4ce6f9","ssdeep":"96:D5PnVMMnp6xy+0AVtZf4IKEQ5bEbTh+QAoVGOu:D5PnVMMnpqf0y/ZwbEbTh5Ao4","tlshash":"9b9199489b68410cf271d5fdbfb15b97f9491813434f80eafad0b544cfa65286aa2bcc","first_seen":"2026-09-17T13:35:33.22515Z","last_seen":"2026-09-17T13:38:39.287203Z","times_seen":2,"resource_available":true,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":307,"send":0,"wait":305,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/icon_fb.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.022Z","timestamp":1789652076022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/icon_fb.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4538\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4538,"size_decoded":4780,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"8552ac3c41b10ae9e7f13d95e845a35d","sha1":"86715d70cf7fada24e9d5e6647135f8678e923cf","sha256":"3963edc509012e07abe8e5e3955a1793a21cadbc706859f1a299779b4289115a","sha512":"5952b45539325f0588a781e1da4b524c08f276b8ba49539906ccd5830538ac80300fc6a5802b298780b0aa840c921ff58d2aa907d67087e10866588c77468585","ssdeep":"96:d/5DiI4ol5U4Lm/kAqGSIh3TcLa7taEbpiuSymf84Jz33iGGS1Mm:d/RJrSkAq8hjc4rbEuX4V3GSym","tlshash":"ab914b716dd81eefd71816f4267ee75ae5e09ef0e226c00ec157b66221712069f83704","first_seen":"2023-12-16T16:31:33Z","last_seen":"2026-09-17T13:38:39.288002Z","times_seen":205,"resource_available":false,"data":null}},"time_used":3293,"timings":{"blocked":2987,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/popup-box-bg3.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.068Z","timestamp":1789652079068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/popup-box-bg3.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 171160\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":171160,"size_decoded":171405,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=2132], progressive, precision 8, 2132x1080, components 3","md5":"cba720e311d45934754b90c26d5466d8","sha1":"942921e96c2d7cbdf133dd233aa8a58db672228c","sha256":"eda36e5b3260cf0fa277578d15751ffff8f73a0c1f7645277cf059d52b118d23","sha512":"d338c43146b015d4681a07c9b0fe5b9d5f3b9360c73e7d79bae88a74c51adfd70ba0ca3835862e891630c8b1ab206129747bc48ac9294cf5bcb591621562fdd5","ssdeep":"3072:XXzgJtwtSBldnvLCvIt8hWTVOxv/sOp7a5QJxdGphXvkt4W35B:XDstUExTCQt8oVO5rXJUXvi4W35B","tlshash":"33f312c693115d12fbda0731c14bcb01fa264d62a787d6a7b4fc74503b85be06c9e2ba","first_seen":"2026-04-26T21:55:56.4249Z","last_seen":"2026-09-17T13:38:39.275049Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":882,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/background.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.072Z","timestamp":1789652079072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/background.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 17:28:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2483766\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/fonts/laza-latin.otf","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.101Z","timestamp":1789652079101,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /fonts/laza-latin.otf HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 40828\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: font/otf\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40828,"size_decoded":41070,"mime_type":"font/otf","magic":"OpenType font data","md5":"6ba1f3376ac55bc6e5a1ae3ce588a6cd","sha1":"2f2858a622cc7a82fc2094590a07bcb90f7aa7ba","sha256":"d3b72f79dc96d04dc19ef7b4c803f3655f39af30bf4994f54ad71526477eed07","sha512":"31ce523e4f9b0ed975779e4eb3b2f409c7db12846068c1d12f72039c2b14c40f164db0d117ecfa1f79212758b9f1a309c45cf046dc0f8049a5b647db985158f7","ssdeep":"768:d3JsTM2491qWw3QyBwkPDweAz+FnhYiroUN:d6geWwskLweFEYN","tlshash":"de039e15370bb306cf59ee710bb2c7697376b9810b07d30fe26a9f28f99d1581c26986","first_seen":"2024-12-14T04:20:34.018819Z","last_seen":"2026-09-17T13:38:39.295732Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1497,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":310,"receive":909,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefiremobile-a.akamaihd.net/common/web_event/common/images/ff-logo-icon.png","fqdn":"freefiremobile-a.akamaihd.net","domain":"freefiremobile-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"2.23.13.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:42.908Z","timestamp":1789652082908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Tue, 22 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"80:B2:9F:CE:36:F7:1B:99:CD:BB:71:38:B2:10:7D:02:2D:47:8A:F9","sha256":"79:2C:E7:17:B6:65:CA:8A:0A:ED:F9:F7:A3:BA:68:BD:15:B7:BF:81:DA:35:4E:2C:7D:C4:86:9B:F9:F2:2E:62"}}},"request":{"raw":"GET /common/web_event/common/images/ff-logo-icon.png HTTP/1.1\r\nHost: freefiremobile-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: OBS\r\nContent-Type: image/png\r\nContent-Length: 1414\r\nx-obs-request-id: 0000019635624C83E166F6BC81736CED\r\nAccept-Ranges: bytes\r\nETag: \"7829ec7999775865a662468dd7e96117\"\r\nLast-Modified: Thu, 04 Aug 2022 12:29:56 GMT\r\nx-obs-id-2: 32AAAQAAEAABAAAQAAEAABAAAQAAEAABCSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nDate: Thu, 17 Sep 2026 13:34:43 GMT\r\nConnection: keep-alive\r\nCache-Control: public, max-age=3600\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1414,"size_decoded":1863,"mime_type":"image/png","magic":"PNG image data, 71 x 61, 8-bit/color RGBA, non-interlaced","md5":"7829ec7999775865a662468dd7e96117","sha1":"d2dda88c46098945bfc1282724aa86478acddc10","sha256":"049490ddf516d0c066e4245937065d8ff549ecddfd0f6ebe55891960627c86e8","sha512":"7989fb7dd6c982699f5c727f42b54448550ec0a535eab1edc367d96deb397657a6b26831a3c4a59c5ef5555c8ee93cc4f1dfa166fcbda1d2eb5941e94fc21429","ssdeep":"","tlshash":"07210be4d5ef7c18a04c91e061f3462ec8431424ab1790a03d7eac53e20ff4548ff554","first_seen":"2023-06-06T14:25:52Z","last_seen":"2026-09-17T13:38:39.28484Z","times_seen":166,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":39,"connect":3,"send":0,"wait":41,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.604Z","timestamp":1789652076604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 13:34:36 GMT\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1221,"size_decoded":973,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"552afa23fe1ea6fff93fb26c31436e43","sha1":"793eb8a26bb5387f951fca732062c5629fd8a71a","sha256":"b6569a3b10861dcbc75d9e150b4944c1f9a74705fd7004bcee34fc7ed4fb9130","sha512":"652b23a522aeaac5089275712e80d898b79a8c7ea7e534b1a5689e2e5d6c9c1896629836c89ce8d7d71e538e256a1179f58d4dfc2e94714fd37e47b6b9f2b733","ssdeep":"","tlshash":"d72161810c26e604db631dd152cd7d3aef0fa154284199289fff54d4bd92d176397b2c","first_seen":"2025-09-13T03:32:03.631814Z","last_seen":"2026-09-17T13:38:39.274523Z","times_seen":148,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/yes_laza.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.070Z","timestamp":1789652079070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/yes_laza.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1042\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1042,"size_decoded":1285,"mime_type":"image/png","magic":"PNG image data, 174 x 53, 8-bit colormap, non-interlaced","md5":"fb2785d6d2173d58d69ccd11be330420","sha1":"6f150d61a88f447c3988aa7ab986f1fe6a7c7d2e","sha256":"a574aa1560227294117d9a434bfcc6d93c5c7feda35a3245904e73bdb6b6a131","sha512":"3558440ed423cc29ac4df02ca307461ef8d18579c562125a28907e78309688615b8009bae3011204a11449994794b5cc6ebc59f46165b826893d67b2edab442a","ssdeep":"","tlshash":"2e111825a17e2904c870203b44fb2554f477c2700412dbc4033fe33652b044446a460f","first_seen":"2024-07-26T11:09:54Z","last_seen":"2026-09-17T13:38:39.275746Z","times_seen":9,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/fonts/laza.woff2","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.102Z","timestamp":1789652079102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /fonts/laza.woff2 HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 22220\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22220,"size_decoded":22464,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22220, version 1.0","md5":"345579e8566a3dd6dc9feb5362fbe7e1","sha1":"df075dd0c26e72fd7df19948f07904c1eaa72ded","sha256":"1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4","sha512":"948b48b697dc39d4c921ef8765053cb414edd47d12c69856191c5e28a580a1ebdb6020d2b8d5639d7ea89fa24fbdd73c16bc5e461b86f644420fffd3fe76b397","ssdeep":"384:1dPjUYc1ZQrSCantuGbZZHmv8m7Uh8OIXXS6pL/AzxeDxw+wBhQPyX/g2g8rYFGk:fJ0qrSCasGZZH9C+lIXppzAz0SLnPgCG","tlshash":"82a2d1a9a2a202d4dafe4405bde8f8b35cc2b43adfc687394a74f54dcc845d18534d5b","first_seen":"2023-05-01T09:29:40Z","last_seen":"2026-09-17T13:38:39.28663Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":514,"dns":0,"connect":0,"send":0,"wait":304,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/angel.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.053Z","timestamp":1789652076053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/angel.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 16:35:20 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1082450\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1082450,"size_decoded":1082695,"mime_type":"image/png","magic":"PNG image data, 1223 x 1286, 8-bit/color RGBA, non-interlaced","md5":"d2895c74a36c19bf3f117a151902e267","sha1":"353a1939eb03d91bd17ad57f79fbe9c1963acb60","sha256":"32fef7c813a012f9877c019bad8f4796b22115727b21321280318fd4c02d7ea5","sha512":"2cc24b6d02766a2713dfcdc0f88a85b2d3014495a10321ec150b369dafebaaf633502ab62cbc7eafb613fcc4ab1d03f1f261003f1dfe233f616e6773ad724ba1","ssdeep":"24576:sCuiknvk96QuHj177xt5VDeU1bcuy8DqvX3StVUCFm8B1kPjlD:LudnhbHjzQUNy8Dq/4eCFm8BQhD","tlshash":"b42533ceb5b97721c9ca223bbaf6648f0c254910b8d96fc4d424c526eef9b0541ce90f","first_seen":"2026-09-17T13:35:33.234784Z","last_seen":"2026-09-17T13:38:39.277829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33389,"timings":{"blocked":4820,"dns":0,"connect":0,"send":0,"wait":305,"receive":28264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/9.webp","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.054Z","timestamp":1789652076054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/9.webp HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 04 Apr 2026 01:25:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 90060\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":90060,"size_decoded":90304,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eafa0dc8e31553dc87683730b8808ee3","sha1":"adc919faca930f66aa6545f02c2e1d55f92c75ef","sha256":"c46456f58662074d6c0d872c427117ab03010d22e20fbfb57d96bf6bba6e0452","sha512":"037efd42819790a49d46865aba4268bcf9ed25072d520411580786820e40764b359668eaa2ce0acb452d3c66fbb21c59b8cd2dccd542fc66648ca7d03d3feea5","ssdeep":"1536:RxCS6gPojGF5BP2hm0lPCUgZ6i9aZ7Ii916B424Rfc4pgxNrbVVSPcH:eStPf8m0laUgZ6847IiHOj4Rfcz3bfEc","tlshash":"0e93d10b652cf045ef9a8bbc61a49e84ee3b00562fe191fc79f0586f3051663af9dc45","first_seen":"2026-09-17T13:35:33.236162Z","last_seen":"2026-09-17T13:38:39.278587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5338,"timings":{"blocked":5042,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T13:34:33.140Z","timestamp":1789652073140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:35 GMT\r\nServer: Apache\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":92238,"size_decoded":92434,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (760), with CRLF line terminators","md5":"d3fa98bd011eaa50e26b04dd3240c5e7","sha1":"7d93915f3ae4f6e214f44b53ff5e2b66c28ba832","sha256":"6dcd27c714d79e00125ed1ccd21ea4a77bedf6a7b0039808b3239562b685de41","sha512":"6f2ff662aa99199445b9fd76f42ce7da502f6186cc6f4a12e31446675c2c8c2895bca5e6c522fad291a3650bb8debac9a4c719d5406721b452ea417090a57e3b","ssdeep":"1536:+yVaerDftYjC/bPqndybe7gxKzWkgxgsFqEUFge:nffaOfbe7gxKsUFJ","tlshash":"42939545a1542c764433c2f9a2b58b4afaad4203c7034b0876fc57da6ff6e45ae73d88","first_seen":"2026-09-17T13:35:33.238437Z","last_seen":"2026-09-17T13:38:39.302584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3162,"timings":{"blocked":-1,"dns":99,"connect":1320,"send":0,"wait":577,"receive":582,"ssl":583},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/css-zone/zero-zone.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.976Z","timestamp":1789652075976,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /css-zone/zero-zone.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5897\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5897,"size_decoded":6139,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b5ec6df118f4599d061a4d9205c3fefd","sha1":"eb79e614d6d3fbfa457d5a0d60645119e0366697","sha256":"6646b4d7a2be963ec272b6440453b54fa40eda1aa1a7c5bc975a3ba2bac5d9ba","sha512":"72967dead6fb147bc0c8d3167785831bcbb0ff2cab41c94b06380662aa31f8768d87d96a048ef3876feec80186b2ad32672145caa6bb01ca08386d608ad5d41a","ssdeep":"96:17njrCt9bRrCs+7j2RtrLTOgaP0pfPKMnfBFhB/nfBShBpzPnnfBGhB4nfBthBzA:1bCtfCsKj2vHOhuBTBnBGB9BSByB7Bs","tlshash":"6fc1dbb4f566208a7323fb90bbf06b844e48957aaa0f4d79f5d5349dc2808fc1c73199","first_seen":"2026-04-26T21:55:56.41814Z","last_seen":"2026-09-17T13:38:39.303681Z","times_seen":4,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":603,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Teko\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.984Z","timestamp":1789652075984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css2?family=Teko\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 13:34:36 GMT\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":1142,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9fe2fb5793fd54dbac9cee45aa7642c6","sha1":"ea10dc92f0769aeed2d32bcd627c520099dbe4ae","sha256":"5eed302fd6c44dc49d8f4cd585b35e0acc64fa4febbe3cfa64c968c60062e9ee","sha512":"570dac0f39f6b242a74edf75ab0be3dbb97ecf52814a6e248debdd19cb2fe738e9b372248159b13851fb0a9e73fc49c9afa5adf8db5a2711850746b693f9a1a9","ssdeep":"","tlshash":"b321ac9104575104db571cc913cebe32ef1e22946411d5348bfe18d8bcafe295351b5e","first_seen":"2025-09-20T05:43:57.496071Z","last_seen":"2026-09-17T13:38:39.276803Z","times_seen":141,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.985Z","timestamp":1789652075985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ezzygacod.ezzzyy.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/15/2026 23:52:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e7326b6fe5ac51e5e8598f5f31db22ed\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3c87d430cdd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":7882,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-09-17T18:31:36.139042Z","times_seen":316299,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/2.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.051Z","timestamp":1789652076051,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/2.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 12677\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12677,"size_decoded":12920,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"c4e643f65a010c88f87450a1027fe390","sha1":"3ce220abfcfd92d84020159903094f3f3a266f6f","sha256":"953b9e1159f118b43cdcb2f9a06c25922b9e4871b46f3b1412acfc22d3ba626c","sha512":"f00f9b4aac8e1935951eff757351c21cc29464290c7a55708a4b9f09075526c0327579e001161ef568d108b9298a2f71a93d3b47e753bb21bfff165bd23e22cb","ssdeep":"384:ArbaPLpg25NDrcvwUN2Gs8eVQDYZI9Gk9SAM:Arbau2zQvzts8eVQDY2/SAM","tlshash":"6d42cf61d0dcf86124ea4317aed5d6963785743d03d3da281e0abdbb8a07aebe138c15","first_seen":"2026-04-26T21:55:56.365126Z","last_seen":"2026-09-17T13:38:39.305206Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4963,"timings":{"blocked":4670,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.131Z","timestamp":1789652076131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 06:23:46 GMT\r\nexpires: Sat, 11 Sep 2027 06:23:46 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 544250\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84245,"size_decoded":30655,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T18:24:09.62105Z","times_seen":61590,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":39,"receive":7,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.988Z","timestamp":1789652075988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2763989\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUrjqJUT1TUMNVcz4Fet%2F5XeSHQw4CK7pObjYd8zteqaVCvpprg%2FJmwA7UcWk2lBqxtXAZj3oM3gzmKvoyiPW0ydE8%2FetjFJpYWMJC9s2iomf7bG9yBrYGMCvDJ5aBywfrHD6zdG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c87d431e13712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5845\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":6849,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-09-17T14:46:03.608853Z","times_seen":11006,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/go.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.049Z","timestamp":1789652076049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/go.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 17:07:34 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1240016\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1240016,"size_decoded":1240261,"mime_type":"image/png","magic":"PNG image data, 1220 x 1289, 8-bit/color RGBA, non-interlaced","md5":"8ca49525d9bbdd3e63b829e32e4726c3","sha1":"31af51b5253e1bf9d9552382df64c6fb05427c46","sha256":"44622979127a224397d795967e2fa38639d0a474ab087c874537fd737329f04c","sha512":"892089c9baaeefed474fae0c0b74ec0c27cad202eccdc1d3681b69e24016e55037e057d304d9f9c615d0447a91f33a7477ac2a374d559b69174bb489569a2ec8","ssdeep":"24576:6akf/w2IUCMSALrFm8Aa9NzG9DSE13NybgS3:pq/w2VCMvm8e2ElDC","tlshash":"9b2533d1a670141af63749f8f0603f2ae334bbf17da602af753e80d6ce25b405d65a29","first_seen":"2026-09-17T13:35:33.25651Z","last_seen":"2026-09-17T13:38:39.285957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6314,"timings":{"blocked":4480,"dns":0,"connect":0,"send":0,"wait":299,"receive":1535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/3.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.052Z","timestamp":1789652076052,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/3.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14919\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14919,"size_decoded":15162,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"777c7eb09c09841014236d379cdb4194","sha1":"03c783b5880bcc4a5fa0d609a1ddc3421d1ff9a0","sha256":"a0c91ccf50fc94c10c958474899f2f3ba472af61f6dfc675649e3739ffc40cdc","sha512":"29040304ed9ce1375784f0ccb9ab41c4b721d5ec9e33754f3d94f2d1fcd5e28f5ed4df30c9c7c66df737b4a1cf7c6a6437f813e303a068c1b4c540efe34bc1c2","ssdeep":"192:UO7Y/VKPbq82R0Zds26tH5C+rsHMAnbVsZ0nuanTorWQNM+2JLl4BAbckBnqI2+7:o82FRJ26VrssAFfnTorUBpBBhF","tlshash":"5762d0ac09bdf4194c4519b7db93d2942d702c1ce9cb2c43b0e7aa5526b69c3e33c54d","first_seen":"2026-04-26T21:55:56.363851Z","last_seen":"2026-09-17T13:38:39.299082Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5042,"timings":{"blocked":4748,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/Twitter-Hide-Password.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.140Z","timestamp":1789652076140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/Twitter-Hide-Password.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7981\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7981,"size_decoded":8223,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit colormap, non-interlaced","md5":"2c25cd03bc9be4e6f35f56dc4021ced7","sha1":"19c523751edca5b183f0ee367a0aa0c8bce4579c","sha256":"4f7bf31fcbac8ecbfb2893999cf1d757fe10e38a65527ff4241484a838f0c998","sha512":"67f6407ee19afe5fbb43d7a76f3a45ef3c8c39cbb635ee2e8864cace694517113ee4dc535d31192df79b7e413ad29bf32ff065296774da186a971a32fc57dd9a","ssdeep":"96:1L3Ki6jYH7ukZ3nCaVGTnuRYnqdrWimbH5MIOKDSrSbZBh65eX787Zv8xZdZ1ksR:p3cCaK4TnuqYrWVZMIhmGbZHvXrxNJrt","tlshash":"23f1bf3b271cadf2ff4e94b52afc8d82cb9138795ad0c44b99e11d6078d3e5aa395084","first_seen":"2023-07-02T16:12:44Z","last_seen":"2026-09-17T13:38:39.293999Z","times_seen":244,"resource_available":false,"data":null}},"time_used":3172,"timings":{"blocked":2867,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/logo.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.140Z","timestamp":1789652076140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3567\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3567,"size_decoded":3809,"mime_type":"image/png","magic":"PNG image data, 459 x 138, 4-bit colormap, non-interlaced","md5":"710ab12fbdd93e89d98902a1df21555e","sha1":"e8be6465ebdd6c3f842ccac1d1c521e317acbd30","sha256":"ae45ffe0390664e695ea67cab0df07806db28af10705db5b6cf714021d33f41b","sha512":"e02d3b1ed7f9f866a02ae9d38d4610f4b6cdcb6cca7946a95c7c1fe63baa67f6c6f308661398220c5d6cb9b34574e3ea50ace1bbd1fa674e80d57ad983d0846f","ssdeep":"","tlshash":"ee719e2f3063079270327f1052fd259a1f60071c2202c05df1a825aa95e0eb97adf27b","first_seen":"2024-08-20T00:41:50.319646Z","last_seen":"2026-09-17T13:38:39.284274Z","times_seen":27,"resource_available":false,"data":null}},"time_used":5488,"timings":{"blocked":5196,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/popup-close2.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.142Z","timestamp":1789652076142,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/popup-close2.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2262\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2262,"size_decoded":2504,"mime_type":"image/png","magic":"PNG image data, 30 x 31, 8-bit/color RGBA, non-interlaced","md5":"aac66a6fbb1e32ba63039324c91ec8ea","sha1":"fe73ee7aab4a7dcb26aed7ba2723caba331494ad","sha256":"85255a785f2dab7ed159571a12956a5eb09492448511ffffa88692ff9dd33cdd","sha512":"f6cc2504cda73471a7bf2f61df642825f4e0b6639d06e247ab9ec6b7049e32df5cada845d989ef4e728caf1091724b3dea32f789bf073737a4710ac2832686e1","ssdeep":"","tlshash":"7c41d82adc6138e2930cf2c92df852296c638752c9805a597cec8c472c343f2b60c1cb","first_seen":"2025-04-10T10:34:52.572082Z","last_seen":"2026-09-17T13:38:39.290763Z","times_seen":26,"resource_available":false,"data":null}},"time_used":3168,"timings":{"blocked":2864,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/withBg/1.jpg","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.144Z","timestamp":1789652076144,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/withBg/1.jpg HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:46:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 33768\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33768,"size_decoded":34012,"mime_type":"image/jpeg","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"abedc6e23a54085d07b5e6b510e4bb4d","sha1":"9f913fccf237bf799ed219cde3e5170b731c2d3c","sha256":"cb1047460b5d070ab01cccf0f455ea79d2644405ff5a2bd53f84603183faaad3","sha512":"22bbbbda5e24015563f6e780b259d1a611fc8e3523d7486b8733fd5f49bd9b0989bc40993537f628df90707d4f62d29ef72a3012e1e266acfaa65dfdf9a9884a","ssdeep":"768:SQftTzO+tduz9R5K8S/h5hNd5YFdRRQa+mACskq:HDfuxiD0XRQd73kq","tlshash":"77e2e292639b2c348fb77bedac5887e80b01114c748c4df929c5459f63a9503cb4b4f9","first_seen":"2026-06-05T03:08:03.280916Z","last_seen":"2026-09-17T13:38:39.305694Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3470,"timings":{"blocked":2864,"dns":0,"connect":0,"send":0,"wait":300,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/popup-navbar2.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.066Z","timestamp":1789652079066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/popup-navbar2.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 26145\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":26145,"size_decoded":26389,"mime_type":"image/png","magic":"PNG image data, 2400 x 277, 8-bit/color RGB, non-interlaced","md5":"775512818abdbf5148d489965891c3fc","sha1":"2c5d7e6be6fda02f63f2db44fbb8c92ac0294a80","sha256":"98ae2af447e7c76a23411b2306f65fceb910905f31b704195d207cefc70bab3c","sha512":"b00c8e10722ac5ae82a87a014c46afa626cd795f7daab20275e4354fb61bd94a2bf17d1792c4d991356faed5d0627a60501bc25931173ea6fa80f74879de7668","ssdeep":"384:FIqnDZYNL3WSNDjk+kGRn2uHOIe2cpAoVRS0ztfhfsUk6CqbfJNGO0ZFBrjnSJc0:TODjPkGguHOIzkjVlhffkofJJ01XSJT","tlshash":"f0c2dfa44e9bfe52dd0f60328e4c63653c75c2141771e03f9af44a4de86937e2e0daa9","first_seen":"2026-04-26T21:55:56.411073Z","last_seen":"2026-09-17T13:38:39.299642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/css-zone/style-zone.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.974Z","timestamp":1789652075974,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /css-zone/style-zone.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 52116\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":52116,"size_decoded":52359,"mime_type":"text/css","magic":"ASCII text, with very long lines (7259), with CRLF line terminators","md5":"ca7facf73109cdc966979a1b45278a05","sha1":"06c4b9c6345cff9e5047263629ce1fdd8dc973ec","sha256":"0c424c9604b7231673ea257e12a979d71c870ef1e538d172a151a6f582cbe792","sha512":"1f1eaa00725bade8feafc72d8c976b3bfee83cf7e47ac9320adcb76c5a1b9db25562b7e47fd89a5b3e0f6b32ecce72624eadba4443b5195409dbc613da560eb3","ssdeep":"768:61A/oNpC2eHEVJTtDllZtdT47c3HoWV8VT4WKYUZ1jG3iNUGEB77V2ahVr1CKqMy:612fVFVr1Hh9BrXJjJQrJ","tlshash":"373386396a53608db24759b8bbf11f759e180413664f58bbb0f0b818d7c653c3aa3ac9","first_seen":"2026-04-26T21:55:56.382989Z","last_seen":"2026-09-17T13:38:39.285376Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1528,"timings":{"blocked":-1,"dns":0,"connect":307,"send":0,"wait":305,"receive":608,"ssl":308},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/nav_language.svg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"23.214.96.141","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.027Z","timestamp":1789652076027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:67:83:42:CD:0F:6F:1D:26:7A:68:24:DD:55:3E:E5:DA:02:47:12","sha256":"43:D8:C4:26:07:A2:1B:BD:BB:C7:0D:D0:5F:D9:84:BC:1A:F3:DE:76:68:33:FA:FA:7E:3D:6F:D5:69:52:39:0E"}}},"request":{"raw":"GET /en/images/nav_language.svg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 21 Mar 2022 13:24:18 GMT\r\netag: \"62387c82-45b\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 17 Sep 2026 13:34:40 GMT\r\ncontent-length: 675\r\nakamai-grn: 0.8d86d517.1789652079.9ec57ba2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1115,"size_decoded":993,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8ba211bb1be1a15bf5b0143ca1b009a","sha1":"215203609a551dcaccf6e434508623f302635f86","sha256":"a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6","sha512":"1f47d819caeab992aff9be00ec10c8bb65004b21cadceaa483d1ff1bf91c3033b20af6a12a03f59e143c9304453c7d52403d3218fccaca48b8d56c75ec3764fd","ssdeep":"","tlshash":"f82120b2416057e68c4a4fd768e004ed017cd02a70bd41c98363772bbc190f341f58af","first_seen":"2023-04-10T07:58:16Z","last_seen":"2026-09-17T13:38:39.296862Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":4200,"timings":{"blocked":2964,"dns":1,"connect":3,"send":0,"wait":1012,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/nav_menu.svg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"23.214.96.141","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.045Z","timestamp":1789652076045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:67:83:42:CD:0F:6F:1D:26:7A:68:24:DD:55:3E:E5:DA:02:47:12","sha256":"43:D8:C4:26:07:A2:1B:BD:BB:C7:0D:D0:5F:D9:84:BC:1A:F3:DE:76:68:33:FA:FA:7E:3D:6F:D5:69:52:39:0E"}}},"request":{"raw":"GET /en/images/nav_menu.svg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 21 Mar 2022 13:24:18 GMT\r\netag: \"62387c82-374\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 17 Sep 2026 13:34:40 GMT\r\ncontent-length: 426\r\nakamai-grn: 0.8d86d517.1789652079.9ec5725b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884,"size_decoded":744,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1f09c4f5c87271dbccf8cb05885ad42","sha1":"18bbacc9c372dcb6bc77c2475595e058c1ad1594","sha256":"b0d849e0e910d13bcdab1e94f5c799dda1a9429c908e18069f9dc7f7d551d58a","sha512":"bad23251371f1bb5a62aff2e768ee3df4c885e1746bedba8b16cfd5ee24e31ada4f88e125f9ecfd2d28baf2b7ad97fecdc1bbc5b4b28e76591f8483f4aea8729","ssdeep":"","tlshash":"b2112998c2e5c4b15c1e461194a06dcda027f01ac27543baea9aee57d0b87c61120f27","first_seen":"2023-04-10T07:58:16Z","last_seen":"2026-09-17T13:38:39.277304Z","times_seen":1738,"resource_available":false,"data":null}},"time_used":3970,"timings":{"blocked":2927,"dns":1,"connect":1,"send":0,"wait":1021,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/load.jpg","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.141Z","timestamp":1789652076141,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/load.jpg HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 17:34:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 240457\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":240457,"size_decoded":240702,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x811, components 3","md5":"9e597ba389bb21318e62551bd022f2cc","sha1":"ba2af7ab4efdba56242a199d060bc20e583aa36f","sha256":"c857abcc41037c845013a31ab0e65455010f398f72824f975985ca37aa0a311b","sha512":"7a2253dd54fdaeccfc71cac4cd7b749dd9e1137227b729052c55004bf595e3a08c3c523514fb4115f291c2b3a797a548606dbc599440a856b0e0daffd1c63f61","ssdeep":"6144:NptfYUmX5KE0MIg2Z9QDfSjp3FNwfEyQIWaWTKMYU:Npl5mQAI1Z9Qjup3FpbIWLT7","tlshash":"6734231cefef29edf225c079af23e65c4681913b19bc737cc50ab6192994ee4d061b42","first_seen":"2026-09-17T13:35:33.267509Z","last_seen":"2026-09-17T13:38:39.295076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6457,"timings":{"blocked":5573,"dns":0,"connect":0,"send":0,"wait":294,"receive":590,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/bg_tip2.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.073Z","timestamp":1789652079073,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/bg_tip2.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 67737\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":67737,"size_decoded":67980,"mime_type":"image/png","magic":"PNG image data, 748 x 224, 8-bit/color RGBA, non-interlaced","md5":"86c5e7cd7946ada77ccecf108e7bac04","sha1":"2a53602fd08a0b5ebaf0baad25150e6db51cd681","sha256":"b7cdc922da71c63677014001992e78ebb25918fc6cb8b6fe9dc752f678474e9b","sha512":"eebbde3b3d08efc65aac6f891029d537d0017305233db9c740a7d2f92bd9a0f7986b5fe20f0f88b6b2406c5053c84cda913beadd2e068fe844a23129c146df19","ssdeep":"1536:YbG6zEa5++iLtbKG6Sz/cHy8InTTo01Y43A3:2G6oa8+iLtbK8zl8InTTo0yka","tlshash":"8263e16e81f33c048dc057512e67a22b32322653c2eea568fbd97e4229416fed6485df","first_seen":"2026-04-26T21:55:56.422651Z","last_seen":"2026-09-17T13:38:39.29148Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":574,"dns":0,"connect":0,"send":0,"wait":299,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.104Z","timestamp":1789652079104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ezzygacod.ezzzyy.de\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 13:34:39 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3061408\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Hnlal7hLxjjZOqAoJ144sTcldu2kuwMrRjNggmNdUwfYInT6wx0C5vUM4hnclKapc5UqhhIKDbVNxg9fZA%2Bs2lvgedsKe2vQ9oWVeql4zk20jVVs0%2BFWU5KZhFVYClUM447uHMI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3c87d566897712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":151018,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-09-17T16:39:07.744046Z","times_seen":42675,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/media/spin.mp3","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.172Z","timestamp":1789652079172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /media/spin.mp3 HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/media/open.mp3","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:39.174Z","timestamp":1789652079174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /media/open.mp3 HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:40 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14799\r\nContent-Range: bytes 0-14798/14799\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: audio/mpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14799,"size_decoded":15092,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"b90e4ca13b142bc492624400e02e7446","sha1":"e10f67a71cf795942811084a15e87e1d934dee32","sha256":"8536412de64d64d8249a29092508577290e7663066b81a008ce68fa0435e24c7","sha512":"82a883fd2035fd6c00f149e11834eca68dfb0512a8296815350fff7544c286f6d35e92b89f1a557ed11769105bfd60a77cbb19536d1b73f1c9c160b7b21c97a1","ssdeep":"192:s5xtqZkvZ8H2zulfZeh0okJEiFJs3BJDX7sppS5RJVkasFcnGBaZ9A0f:ctzXulRk0/ts3DX4pp8OcGIZyc","tlshash":"8662cf007e44027dfe965fbe364fd5b9c19629ee9460cdc299122fd1423f082e779017","first_seen":"2024-04-24T06:30:36Z","last_seen":"2026-09-17T13:38:39.280736Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1389,"timings":{"blocked":1082,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/tokens.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.050Z","timestamp":1789652076050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/tokens.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5474\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5474,"size_decoded":5716,"mime_type":"image/png","magic":"PNG image data, 135 x 130, 8-bit colormap, non-interlaced","md5":"c17d58c98659f3829c4a29a44b737861","sha1":"53fd8ba7e57e6dcfcbc40b469320b21bf777cbea","sha256":"a20b9d4d4ba5d014e36e326e4f04f5a4a8c1d37803858ba4388b10b12e9177ac","sha512":"832752eaa86db5653f532897e0863537c26eed094a3bc3fb546f76aad01d6efd222887445c205dbe16573da48680f1364cfbdb4dd7b4429cf6ad85ab254030ee","ssdeep":"96:ZQuiwQozwaypUMi4vPtVW8j0Ys5CWG7vpwrNpIvGRVuQS28TUrFnXb6X3Z:WPlyMiCfrVlH7BwrfIvGfTS28TUrFnXe","tlshash":"13b19e895643726cee615304d5d776498dfd9fba00fc2cbb2a66f13b78710b18282698","first_seen":"2024-04-22T18:38:38Z","last_seen":"2026-09-17T13:38:39.298527Z","times_seen":107,"resource_available":false,"data":null}},"time_used":4821,"timings":{"blocked":4516,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/reward/8.webp","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.054Z","timestamp":1789652076054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/reward/8.webp HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:41 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 04 Apr 2026 01:22:44 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 91202\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/webp\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":91202,"size_decoded":91446,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20f00dfd881181045cecef5bed79f172","sha1":"0957a1d06de391c7485fab824f0f27dbf04a9d4c","sha256":"6b128f38c02399b3f28eddc40142dd1488e9059e7f792532550280021697183f","sha512":"3b78f1a67aa175a11579af87e0e49ee10b3cd4e2447e9e511ac05aa44c928bdc0b275f8392429184e9142284768363c8cb7910ce02911a23d098403a68a519bb","ssdeep":"1536:fwuk/7mj1fsmuhDzHxX3zoOzCYUh+pRGkoNiyhW9EdZLxe1DszEPob8larG:fwuoShfsmQDJvzCYUMp5oYCRdZleEprG","tlshash":"df93bf013cc51360f43422687e60539a7112ccbdfa26a15762ea69def77c216fc79c6b","first_seen":"2026-09-17T13:35:33.272793Z","last_seen":"2026-09-17T13:38:39.288709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5255,"timings":{"blocked":4963,"dns":0,"connect":0,"send":0,"wait":290,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.128Z","timestamp":1789652076128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33018\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 16:22:18 GMT\r\nexpires: Thu, 16 Sep 2027 16:22:18 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 76338\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":34001,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-09-17T17:20:32.781564Z","times_seen":73145,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":16,"receive":16,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.129Z","timestamp":1789652076129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-1.10.2.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-16bb3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\nage: 3125834\r\nx-served-by: cache-lga21955-LGA, cache-bma-essb1270024-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 13583, 28493\r\nx-timer: S1789652076.136088,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 32788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93107,"size_decoded":33429,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T13:38:39.279675Z","times_seen":17340,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.133Z","timestamp":1789652076133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29707\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:31:49 GMT\r\nexpires: Thu, 16 Sep 2027 10:31:49 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 97367\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84320,"size_decoded":30690,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T18:06:20.327249Z","times_seen":16770,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":31,"receive":8,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/js-zone/slide-zone.js","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.135Z","timestamp":1789652076135,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /js-zone/slide-zone.js HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1530\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1530,"size_decoded":1778,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"aff6ffab6b449f031ee8b2f0e550f7b8","sha1":"85f544cf556a48c10c754636443cc8df2f86a123","sha256":"497a23bd289b4a897294e8f9e2d083339e4efc7eb98b1e5595fbc0c83920a82f","sha512":"0d0b69f71a3d7e197b9cf4f46ce953768d3210781abcf8a6a5bb13ce14684d3c857d30b8c1c387e458d45b4cb7c8be90dd3559ddb903b0fe581e1adf10585f00","ssdeep":"","tlshash":"b6312805e4181d2c99f66638af69cd02e8fa08118e09d680fcf8a05f5fb0e1566ddef9","first_seen":"2024-03-29T18:37:59Z","last_seen":"2026-09-17T13:38:39.294536Z","times_seen":6,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":699,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.603Z","timestamp":1789652076603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 13:34:36 GMT\r\ndate: Thu, 17 Sep 2026 13:34:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24899,"size_decoded":2579,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"dd59052c593dd4fd28220ef1c4ad1931","sha1":"dc1d41a2023de52c9a6c22813f4f3e4023fb18e9","sha256":"e1846912562de798b6a53af1f5fe9c464510701b176dacb7ec48fb8d20685771","sha512":"187d04ddbc2fca32f696fae47a69878f3eeba01bbbbb6404c9f7a6bc0c0acee7262676307f49f12d519aeca74f7dd239fb8d5b867f8411769abbf5b8cbbbee27","ssdeep":"768:3FsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUM+:LIHT/","tlshash":"e9b20ba10417440097834ce223cebf35fe1f62507042d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T02:02:37.810981Z","last_seen":"2026-09-17T13:38:39.273791Z","times_seen":216,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/css-zone/animate.css","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:35.972Z","timestamp":1789652075972,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /css-zone/animate.css HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:36 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 81530\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81530,"size_decoded":81772,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"110df922d0442ba4971d636f26e2dfc0","sha1":"d0615f29fce34c802f84bddf79b02afab8012f13","sha256":"54e45a0cb0fb522c4c3637e3fa2d6a7729bf8e9b2266d268cae0ca0583bf6d16","sha512":"f7f64ae88de4dc1778624515645aebd98b12460a4b67aa3fbdf6c2e40abedd1e3c2d482aa36f669049192f61a138a0f99855185c63e7b1b43b131ae26ad05992","ssdeep":"384:g1Q14x4121e2W2/NlNCHSH0lLC37nqMOjTrm/X532KoNi4oL4Th:g1Q1j121MHSHD32KoNi4oL4Th","tlshash":"1b831e6e184111c447b24b69d3de8e6ceb3d917318121eee72c2588f8fa6f5853cd94b","first_seen":"2023-04-10T22:55:41Z","last_seen":"2026-09-17T13:38:39.29216Z","times_seen":1314,"resource_available":true,"data":null}},"time_used":3039,"timings":{"blocked":-1,"dns":0,"connect":310,"send":0,"wait":307,"receive":2436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/style-img/logo.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.025Z","timestamp":1789652076025,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/style-img/logo.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 01 Apr 2026 18:45:38 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8314\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8314,"size_decoded":8556,"mime_type":"image/png","magic":"PNG image data, 616 x 90, 8-bit/color RGBA, non-interlaced","md5":"c632e6bfd0076695e56477bdb3f7232c","sha1":"5b4212f029814b5dfda946ac5e5a6ba97857feb9","sha256":"86ccbc1dbeb58af3e6bce5ee52f86a47399da998ad34a0fd2ce9b0b539d92f6c","sha512":"365088b4901122071cb75c2cc379882941cacea8672e96006b6f617266af2490b7cc733c3b9511c76a28ce6d3934f12c6b43f4804b0e122bb63714b2fbbd8fe9","ssdeep":"192:XzswDYKdOFqvBvjhuvnqryjrESO73l73c:js8OFqv2vqrLJ3lzc","tlshash":"cf029eb28c3984af8196bf2ab3434bc293763917e31b5269428924c27645cd438be749","first_seen":"2023-05-10T03:43:29Z","last_seen":"2026-09-17T13:38:39.283188Z","times_seen":401,"resource_available":false,"data":null}},"time_used":4789,"timings":{"blocked":4494,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezzygacod.ezzzyy.de/img/headerr.png","fqdn":"ezzygacod.ezzzyy.de","domain":"ezzzyy.de","tld":"de"},"ip":{"addr":"103.30.194.195","port":443,"asn":138608,"as":"Cloud Host Pte Ltd","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezzygacod.ezzzyy.de/","date":"2026-09-17T13:34:36.046Z","timestamp":1789652076046,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezzygacod.ezzzyy.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 05:46:19 GMT","end":"Tue, 15 Dec 2026 05:46:18 GMT"},"fingerprint":{"sha1":"34:61:49:E9:8E:E3:97:28:32:5A:AA:AD:1C:48:C9:93:0D:F5:21:50","sha256":"D5:AF:E6:7A:10:5B:38:A2:4A:60:B5:4F:A5:27:42:E2:C1:33:4D:12:76:48:20:64:85:34:EA:45:D5:50:2C:2C"}}},"request":{"raw":"GET /img/headerr.png HTTP/1.1\r\nHost: ezzygacod.ezzzyy.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ezzygacod.ezzzyy.de/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 17 Sep 2026 13:34:40 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 30 Aug 2026 17:28:30 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2783571\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"ezzygacod.ezzzyy.de","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"ezzygacod.ezzzyy.de","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}