{"report_id":"e776d125-8df9-41b9-95d4-6290f55caaf7","version":6,"status":"done","tags":[],"date":"2025-12-22T08:48:35Z","url":{"schema":"http","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"172.67.175.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"title":"EZY Plugin - EZY Plugins for iOS \u0026 Android Devices! | Official Website","dom":{"size":114190,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"efbbe11cf62a1ddd87d658a906383f4d","sha1":"f8514018e038add9399be0b86ec25e7a984252c9","sha256":"f03dce18012fc3d8eb60f3d91a95ab8b7085866275d609b3d26d9baec3cca196","sha512":"15124d208f2d133e84d83a121e1582f55b81fa5e2df7828a007abd5083e50fc478508a1bace07a192a1aa61592c254951498992127aa8114a2565bc16d4928a3","ssdeep":"1536:edklld1doadmDiGdIex5zdHdj0K50wna0:edklld1doadmDiGddx5zdHdj0K50wn1","tlshash":"21b3f4b052af9c77200347de2424bbcd70afde35d763c9a2f5f702662b8ad90994705a","dom_hash":"domhash3310158c139173f66e50658f37041bb2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"172.67.175.158","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T08:48:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.linearicons.com","ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2013-12-10","domain_rank":393482,"first_seen":"2016-09-23T07:43:41Z","last_seen":"2025-12-17T13:18:44.720706Z","alert_count":0,"request_count":1,"received_data":8269,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"trinketsofcody.com","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-03-09","domain_rank":704089,"first_seen":"2023-03-15T15:39:06Z","last_seen":"2025-12-19T23:12:45.094266Z","alert_count":0,"request_count":1,"received_data":2029,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":8050,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-12-21T23:41:28.705339Z","alert_count":0,"request_count":2,"received_data":126452,"sent_data":1010,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ezyplugin.com","ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-28","domain_rank":0,"first_seen":"2015-06-25T06:50:23Z","last_seen":"2024-01-22T20:25:00Z","alert_count":209,"request_count":209,"received_data":2253819,"sent_data":92054,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":3,"received_data":125013,"sent_data":1605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"getcody.ai","ip":{"addr":"3.231.135.106","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2023-01-15","domain_rank":423430,"first_seen":"2023-01-15T13:38:37Z","last_seen":"2025-12-19T23:12:45.1275Z","alert_count":0,"request_count":2,"received_data":612,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-12-21T22:36:12.072016Z","alert_count":0,"request_count":1,"received_data":85366,"sent_data":442,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"a158c11990ed05a2cfeb00f4af621c40","sha1":"c45be0123f33d579a05ae4cc9d0008c58ca8be65","sha256":"ff4b3f94089056efa930f19e02349030aa09453ac8066b6bb52f4fe6c8ce7bca","sha512":"f39f23b6fe80ffe64121deacc095c3a70105329f3049f68a2b337999151e39bbbedd878ecbbfd115fdd9a5f89a89b397b6927e52ea37d4fbabd671e2b816e59f","ssdeep":"","tlshash":"ee8000028ab8ae023b02c028288ee30c0000a038228a8b08a032c02a02c20080280c00","size":31,"data":"","first_seen":"2025-12-22T08:48:47.764166Z","last_seen":"2025-12-22T08:48:47.764166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"479bab9600c4810f816f45c18010babc","sha1":"e090eacebab346e7138641b929ee9f4ac264915d","sha256":"fb6b22ab09662fb9d693f7e1b0147c56bbbf8cb21b0fdec5dfd014918ad4fc62","sha512":"0a98159ddac9e7deca12b5f1fa3b83a65887670ec7bc6cc6ba6c9e516242256d70050598565e08654482d16b3a2d45cd71bd14abe890234ccc073537d20436cd","ssdeep":"","tlshash":"fd01268a7f7d336145df7267e6dfafc93030000a2109c70a2c78c2d07934d6290aa6ee","size":668,"data":"","first_seen":"2025-12-22T08:48:47.765947Z","last_seen":"2025-12-22T08:48:47.765947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-09T09:51:22.263205Z","times_seen":17616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/js/main.js","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdbc6cd360f6f18aed4eca971352e216","sha1":"f26070b77ef2a7cbcce9707ed6c1a1e22d2d5810","sha256":"6e38783984531346bd62ba4f898fd7caa1ab69f8ba5aef7a5bac6d964319887b","sha512":"703bf763c40b6cb3f24bfe78777818679b4220194bd554687b41217792adb25a5f45fc33b1ad56cde86199032c5a83f8313816bd3c82449168c46b6179344d4c","ssdeep":"192:6tauRZSz7/H5qfIYlEQXiWE7WW48I6mB84/0u0m2YRB//+55/s+7:6taeZSz7/2lBa7WWI6mxFRd/G/s+7","tlshash":"1c22a744bfe1a4cf03c78f7b732fb5c4ed6a39151a48895af202dc6066ca216f992537","size":10205,"data":"","first_seen":"2025-12-22T08:48:47.436734Z","last_seen":"2025-12-22T08:48:47.436734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trinketsofcody.com/cody-widget.js","fqdn":"trinketsofcody.com","domain":"trinketsofcody.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"807799691667cd820224e31266231374","sha1":"0c36eeeb65f1e3833ff174a865653e112e4ea8d1","sha256":"633f1f967b4f5ee7e416ef0e55bba983e657bd43971212f9c6ad9688895e6c56","sha512":"754488d2cbf71d085f66f0f60f3567d5597f5c64116a68b58dae8eb8933b50059aa427a1225e897792d505ee96196ad68ba47d6a60167f6319294ff903bd8d94","ssdeep":"","tlshash":"fb3120b95535a732388601db76b9b3a8bf65392cb112082044bcdc19302ccda46bbf98","size":1508,"data":"","first_seen":"2023-10-24T09:40:43Z","last_seen":"2026-04-30T23:55:53.10003Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ce3e7cae1969c8882ddf6e92849af52","sha1":"6dc1bda62f64f0a35e79b6ff422e56a37fed41b9","sha256":"5d84bb472bb5def55444bd02bfd0150e956d352a6ad893cee0e8818ed34f0899","sha512":"6aacc84f24704b69a7498a9f1c8e20b92c36d9cd7bab4a1b7fb0029cd360e027b5629842238e488c5db266470290ab37460597bbf89ded18b2a6ee88c9069a00","ssdeep":"","tlshash":"f0f0c05abe02d5259372529813efd709b44f204a580aca839c95c4d0b564edb941ad8f","size":549,"data":"","first_seen":"2025-12-22T08:48:47.76723Z","last_seen":"2025-12-22T08:48:47.76723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-05-09T09:38:53.654167Z","times_seen":217527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-09T09:35:31.882041Z","times_seen":648469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/js/jquery.magnific-popup.min.js","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-05-09T09:46:33.696073Z","times_seen":21097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ezyplugin.com/img/polywar.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/polywar.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8926\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-22de\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sv1L5%2B2B0krBFTlQiED298RbXbSW4M%2BPgq%2B7%2FD92kpNj%2B1xI6%2FPNzSJXmK7LXqr68sc0vdvQEZUig3SSnw9uUJQX1n755S6bnlMS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be80baf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a9c12918d3d1e38d70c5b73c6c92c6d","sha1":"543d3241e8abd3030914d5fb8a7df5067d5ef323","sha256":"33a54fd2b7b86aed6442444edc6a943c51c255c59d4bbcf5c81c0bde8b9ff1be","sha512":"5db6a9f881bbf6c9ce7a01c966646e9bdc44f2a0e388b689c3f32d5bb614bb3a43644d774c6ff62543458c76f6a2f908d92ed41fdbed9695943d1ec54f84412a","ssdeep":"192:kfwVSpUcxZ9FGU0/7z1Q3Th0xuHmr7B+ZuB+HDUb5BYT:kfwVSycz/GTKh35SqUlGT","tlshash":"98028ea7e35721e8d93b623bc0904bc57924ff0da706083168db51252727ae95f3525a","first_seen":"2025-12-22T08:48:47.312746Z","last_seen":"2025-12-22T08:48:47.312746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/favicon.ico","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:15 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Mon, 28 Aug 2023 01:31:54 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 13 Dec 2026 19:16:34 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nage: 739901\r\ncf-cache-status: HIT\r\netag: W/\"64ebf90a-197fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FGCsBeyMP6sDZwxlxUH4GhNeThKpT70FrCgFwoPdcIePEttasJOnPfOYnbmRnGY63lWAm%2Fdd4%2Fu8nZaGRI%2FXMn4%2Bu3R2n1mQsGyD\"}]}\r\ncf-ray: 9b1e5bf01c2f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104445,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"bb23e123b2a09649cf3ca50932324b0e","sha1":"18141134a31cf8c186996979d1ed60a9511bbbe8","sha256":"0d582d10af8afa7148b7464cf5e2a472d40edf3e898e90c0c35ffab7e2f4b343","sha512":"98cf985478f461731e288662a53ec9565a210a447b8bd768e1685ab55da2d539149aedd8cc06016bd63ceaee359bb3aa74d6992c86cf3cd8b20613b08153027e","ssdeep":"384:c0P0k9+NQppT1T2sCt9FSErLlpzfzEFaTyVHDqccfsexb:L0M+NspTXCt9QUzfzEFaTyVHDmfsexb","tlshash":"dda30e8dbdc3dee3c016a8f01be0d2f986acee18a474665a36d1be1bf4d759805309d4","first_seen":"2025-12-22T08:48:47.315999Z","last_seen":"2025-12-22T08:48:47.315999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/forzacustoms.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/forzacustoms.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7094\r\nlast-modified: Wed, 29 Nov 2023 22:10:13 GMT\r\npriority: u=4,i=?0\r\netag: \"6567b6c5-1bb6\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4KocdgF3iVmJ4Jfh4oRggNfE9VoRVn5rfpd5VBi8JypR2PjL7dA1AnD7sKIETKgw0i%2FTrJkO%2BBgrZJW%2B6xh4rA%2FFXxnTOdt9mLu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3daf5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"645f8181cebecc17605d75e580c381fa","sha1":"9912895dcbb1bd582a40fb79e7a66f5dc6713598","sha256":"0643426a9d14a65d5537a8f74a474f017d2d1a18875d5d8018c2be1bd1a56d56","sha512":"a6954193ce77e23151566fae49733ad90c7cf6fc8ed441c4776d0cd642752b3de7a1150014a113e4b7f599d5a50906656d025583589bd25d201849829e88b900","ssdeep":"192:mEQ1aYuRRYrJ6smiYAgmaefc+K1JvYJ0Cm5HyUuo:nLvs45ma60vpHhyLo","tlshash":"07e18d1de8c66999d47e28e71e9fbb67ae56c1488540a3cfe40dc08734ccb0e67b9046","first_seen":"2025-12-22T08:48:47.31947Z","last_seen":"2025-12-22T08:48:47.31947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/ff7.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/ff7.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6910\r\nlast-modified: Wed, 13 Sep 2023 05:30:46 GMT\r\npriority: u=4,i=?0\r\netag: \"65014906-1afe\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9NPMA0qDLJ9nCegfCe2sosJjNr2yPTAg2nZy17Sn%2Febmr9v%2Beoa23mehVHtGO9PtGEWtiW5Vy7biIJXz%2BPHdIQ9MpKeEvJ%2BaDnZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be45b1c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6d673f18bba9078df5eb6ef359096d23","sha1":"26df8701165cab4ace76680e5cca95ebd1b1f016","sha256":"e834f6d4158cd3739fab4018c664feb4dc3b8b1fdcd4695247a3cf7d78c3d8ad","sha512":"4cefb223c4f4f0171d7e5b7de4941a44b512d46272b3d74755933e2ccc8cbffb2345f1a1daf73c08e19969243080f36046a06fc084019edfaffb286ae7b35292","ssdeep":"96:h0lVmLvm2sbiasqwyu5Cwnk1bWQymtD9Q7Rqoxzi1NySpkydoSEBVZivhXHpQC77:sVmS2sWyus+UbXEbsUS36otHp7","tlshash":"22e19eb25acf0e21868b2877828ccc737e257f42134c19a7841b2cd3d81950ded5c954","first_seen":"2025-12-22T08:48:47.322402Z","last_seen":"2025-12-22T08:48:47.322402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/trucksimulator.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/trucksimulator.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13480\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-34a8\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MoIaJGIivZjYRx2AjKtcEtUwq%2FN1oFsWXfhQwLDV4kHJ6qhpzam%2BTOJH9gMu7ySqQeMIJ7TaqBjJg%2FoondIqFwU94OnWbGu4SSjZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5ab43568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14a0bf7909fa440f33f1518607873c1f","sha1":"561bacc950b85c43cba916c9c4bd2445b9cf6f19","sha256":"43a20cf7e4092974d70cd733d7c0c42465ae3c64c218ccd7531f66fd524b8b97","sha512":"b2df18b4b7484dc8c1c8dbe0fd2ea830a59f554bab5e4a4cde60e4c9f3a9d743cf2f04e703aecde46d62495f137b0f814309c665195ce90a78f60e00e5eb2d7d","ssdeep":"192:frUNDaNgIy+jRmOMXZN2uVPrqlGdV0TlGZTdkwN9SWmX0bbvh3InE8JPh6KkL/oO:zU5aNljMOMXBEGNTdw18rh30JPo4Y","tlshash":"a052c07caf68a6f24afde7b289dec036fe0667249454c00b2b6365299108461cf93798","first_seen":"2025-12-22T08:48:47.324914Z","last_seen":"2025-12-22T08:48:47.324914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/puretuber.png","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/puretuber.png HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2196\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-894\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eko4vSHrprAGW4OIgErfGQI0s%2FNrNTfIbVzR1riyYP6BSpRnMH7dTVDgo22xcSyVRmGjIsHAqrgdnYlvLyUJrC0TCknlRmyxHIEt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be62b5b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2196,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"25ac3c0e7fe71c17f9c24deac828682d","sha1":"26faa51a334c19aa17d2ad1b5286127e112f5c84","sha256":"f6d19ec1bf42eeb7b51e30faca4b51109f8a1a28b24b061604f21cafd03ed71c","sha512":"747c94a90975c787cdc51d66216cda92263f181947a4893156217d366b3f817ba81be03002b9bd4846e121db4e3f440b37cc0f13625d82ce94750dc04085f62f","ssdeep":"","tlshash":"42413a2253b009f5d7726f000fa3f189ce05219a40d27bfda3ba44874a855897e5bda1","first_seen":"2025-12-22T08:48:47.327447Z","last_seen":"2025-12-22T08:48:47.327447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/scriptware.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/scriptware.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4872\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1308\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IBkNcEqI61OZxiCrQgsD9LYI6EtNAR8TNilCNPOtKlIx1k4FWKh2N7hVjhiC2Ttu%2B1IccZ0DQKmCcgc5nrBNsWDVPCC8mAFLJbx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be62b5d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"971dbac22f3ed978fb115a58913ec128","sha1":"4ea1ba245c2d488ebdc4d3f3077155d3f50ccc7c","sha256":"d08cf95c1a45da43b97ce9e793ea735420768658af2f4ae35ba38b31a8c61746","sha512":"91707ff8053f2deaa2167cf3e6366691b4cccdb1b4836d4a92cdc5038568deed3e0ec943086cc51d14de0cb2861b788999196456abda4c2d9012452abb98bce8","ssdeep":"96:D6Elbw+ivI4b3tXISJzXLFAPtBfBfP9ESRuglS/risp7o1R6N6ZlHedFxM:Dfwxb3lpJzpotjF/Turisp71olHelM","tlshash":"0ba18d29331b537afd286af8203b8f52d34ceb015d5a52b6501953552fb82f3af4514d","first_seen":"2025-12-22T08:48:47.329869Z","last_seen":"2025-12-22T08:48:47.329869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/omeglenew.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/omeglenew.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5126\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1406\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tkfkAnLxol885DGf2UPZQn1gs7j44LhirXzoUkvp%2BJP3JKvZHyQowYChlIwFHXLz7F2jlg68oZKP%2BAbOO3qQFv6uVJ%2B9b%2F7G%2Fv3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be73b8e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5126,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"c733c5460a93961c19e6053185b2439f","sha1":"2f8aab57679541d50c48579e77bac989a12bcb7e","sha256":"e393b7cf40ce0bafb447a0245dc814e4dc5dd56c324428e8dbfe42535ab86021","sha512":"4884371a7835d53814255d5ec816be4179daa0753ff2ecf7418e3a9894d04c19f1949fee60aee2229d3dc5d0e6a8e3a546c96045b27b1082ecfbeac5893344d8","ssdeep":"96:+2fZH0W3YkvKNf1NUh87B1n9UF3WoPp/tjYvf6ddrz/6Vv+AMMc:tV0WomK5UOd19qh/tc3OrrSBMj","tlshash":"07b16c05de712e51f29470e101f28437aa8670045dd8a48be99ec51fc62e2b31fe9acf","first_seen":"2025-12-22T08:48:47.33245Z","last_seen":"2025-12-22T08:48:47.33245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pizza-tower.png","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pizza-tower.png HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 2149\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-865\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1%2BJIXVk4UbCzlood57ohcMU0bbAdrYUwCGUBjhkirA4dFkQzXnGbC%2BF0FPwVnuXh8sqK0ZmWf96bGVySAPq7ArbJ64yWN1sC1%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7dba1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"a19e14fb52d5a668dd2bf0669428d13c","sha1":"d52b2cdb744d6500033143a5941b2dbd4bb9877a","sha256":"24d35b696306b66cd031625a65bb5aa57753450aac607f1e39d1f8deddfbf64d","sha512":"423cd6324c3d66b22fd3c21b94d8d8bc02a95c7e24f9c8d0b615537061a346d85396642ea15312489196ee5e2dd821e95093b73bed67028ad213feeb807a55e5","ssdeep":"","tlshash":"ac4129a9ca462dcd178b675737f3a0d6824b9917953cc07b6f63248ab04fa028692f40","first_seen":"2025-12-22T08:48:47.335339Z","last_seen":"2025-12-22T08:48:47.335339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/township.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/township.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10340\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2864\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Chphju5tnM8EJapLooEbqFZWyBXMO1TOw7CheAwy5gTfXKkaWdBW3t24Q%2FoDZlPQrQe8fk5aKDCG%2FQfO5q4eQjq0%2BwSPg8LwoFJt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7ebaa568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc8af964ba4d9a1ec64151507f36c411","sha1":"a35edc9538bbc098577e49a778d29e7b91ef6c0a","sha256":"dbcd69a70c031f6243be3e88d3629eec1a3e4503a0512a7f5b730c774e34014f","sha512":"cacd7ef8c23228ace8bc636305a69e715cd036816e0a114719b177a7b6308b774d229fe445142a40d5a7049c91197d2ae02880fddcc1ffb91f1d605b43506cc2","ssdeep":"192:YfwqhWT7Qr9Yy8MXBU58J+e10i3Wt26751ucADOObCHJFnxkbk0JGIF:Yfwq0yx8+UFeai3k2i5grDOjJFOk0JGW","tlshash":"3a22c09437a93bc2d210f5f960a6f340ffd1b8aa907d8c5b8284433c4b1d2647df4a6a","first_seen":"2025-12-22T08:48:47.344085Z","last_seen":"2025-12-22T08:48:47.344085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemongoupdated2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemongoupdated2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3878\r\nlast-modified: Mon, 18 Sep 2023 03:33:22 GMT\r\npriority: u=4,i=?0\r\netag: \"6507c502-f26\"\r\nexpires: Sun, 20 Dec 2026 12:48:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158395\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2500hZsKBMJuAfucR85bkYQ7aBaCvGwWfF6%2BedvYiMmFW4%2FQ6gOf53ZYy0IDqYwZWUG%2BJU3Z49WK4smw4mI19uKlGlVeg2KcAWy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be35ace568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0571b9d5af7233223ae1de002033409f","sha1":"4ae865fd060843ffabca5aa02758f13e16c2489e","sha256":"c4b61ffb0937c0e361678dd06940b1b5fe8df6c3ec6221b3e72861f535a4d43f","sha512":"4f759ca4ac41eabb4de3bb6608823d5aa047a7f686be4b2568519f46acf9e5336ff395582124ae4fa20eaccf5a8554c5faf788040252332f7450ff5e54a4bac9","ssdeep":"","tlshash":"37819d00e7f8199cfde1473e47dabe268d7ad442c088a615f56266c4c348c6a2fae1c1","first_seen":"2025-12-22T08:48:47.347086Z","last_seen":"2025-12-22T08:48:47.347086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nba2k24myteam.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nba2k24myteam.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11458\r\nlast-modified: Wed, 07 Feb 2024 05:51:16 GMT\r\npriority: u=4,i=?0\r\netag: \"65c31a54-2cc2\"\r\nexpires: Sun, 20 Dec 2026 12:48:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kJpGiF1J%2BCI4qINNLh3nWwzDoymadKq8IsjE0W74j2dEVZfpootQ7%2BDLZE9mjGUfknFSV0Ndx2a0tYl7pGy6kw7Nsw2cgiTKXiI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be37ad3568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aa4ba23ce182d938336f87169c2f331","sha1":"3dbbd4a56f8529b4d02d8048445a61f1361db6b2","sha256":"3167e4e047f3477d1d60ec71b45cd86d50da5bd313b698ee5fb797b645a2ccd8","sha512":"5a83a7f8ee6e60dfc04bbd0d767b3623bd22f75c70fe53c1783777fbe1aacfc09d3846511d87af2865c7c104a82abe8f8955a76c8d234c38fa4cdcc8bd60bc1b","ssdeep":"192:KS4OOroNXQqcdcaagElZjWNtpbeZa8LZ7q9GvsnMxncBJQQ91/Y21UpiORN+xmRN:KS4OxAqc2aagQZjWb94LZ7qusnr3dDu7","tlshash":"f632bf90e4e1e91cec610bd68211b8d17e406d9fe11e53fbb6bc07b8cd928528a7f5e4","first_seen":"2025-12-22T08:48:47.349243Z","last_seen":"2025-12-22T08:48:47.349243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/whiteoutsurvival.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/whiteoutsurvival.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6934\r\nlast-modified: Tue, 21 Nov 2023 00:17:09 GMT\r\npriority: u=4,i=?0\r\netag: \"655bf705-1b16\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNzCDYdXokDfUPvhicxE5JZ7TDP89Xu6bU0NhXb%2FtN1DuoNxhPoBVX5dfc90e%2BK%2FWgaCKkiRiQtkYkBa%2BpmVyvwjOKfd1Le5ZFxv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eafd568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"785068b1464cf46484627c7114b52ce2","sha1":"1d40f8259c8f48c14d3dc42722ca964ede535e2b","sha256":"724f5b4fac5d8a5218e2f8d92a9d38aa06a9c922308a270c4b1bc87a5953982b","sha512":"fad28332027a8b286b4e46b6c70f69f455b9584a8e61a5e4c997fb9c504611ac3cfd76b7a8773218aec93efd4ce18586a8e25d5a630d22b427aeda3152628b72","ssdeep":"192:tvf1D3AKBaUwdVyzxyf+bulmq0iFJvxAvHm0maK:5dDpaVbnmriFVmPm3","tlshash":"4de1be37f7aa3162d72a2c373308e5365dc6aa6a9c5015e29d309a8580c7b7c0c4f7e2","first_seen":"2025-12-22T08:48:47.351802Z","last_seen":"2025-12-22T08:48:47.351802Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/realracing3.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/realracing3.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7872\r\nlast-modified: Wed, 13 Sep 2023 10:51:30 GMT\r\npriority: u=4,i=?0\r\netag: \"65019432-1ec0\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwVOhWZhq9%2BtSrfifcphV%2Fj2e39Iu1E50mdV4g7XRiuSq86s0bas7lha0zL%2FY8MMkWZYZo58DRweaL%2FmxqEFp9y9W5Z%2F1EpgG0eo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be52b2e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36af2ff875b999294a36667bd8625e5b","sha1":"04c2708ee73d0f88dc989672bd40c850068d125c","sha256":"d6eff77da93c4664b7a34c0ea0eda2d304434c797d31baed2ba0f92b8ee35f55","sha512":"4459850d6ec210d8c065e67d8e24ff1084e56b88ec2fa333d3bd4fe1f2e24059db95b1028fae3e5fd7b29958cb77cf54768a3c4e3e474a7876374be4cbf3d03d","ssdeep":"192:i0CqZnUalnw/fYePlW2KK3hNaXJCNPm4bu32TnbCRQkNsvRpPG:i0CqZUCMYalW4xgJCQ2K2TnbuQkNsfO","tlshash":"c4f1aeab931354d8f69d65ec330478b5608bf857e43b53cac00de69e720b1b51ee6a83","first_seen":"2025-12-22T08:48:47.357897Z","last_seen":"2025-12-22T08:48:47.357897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/starwars.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/starwars.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9422\r\nlast-modified: Wed, 13 Sep 2023 10:51:26 GMT\r\npriority: u=4,i=?0\r\netag: \"6501942e-24ce\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Yn%2Fi5ET8lGsmVu1yHgkKTF4Y21%2BcU2VxiyO%2BKPb0JDwN6uDupCuRwdq5TATFbxvoFE4J8S0sVAoOgMApUcCOkaNADy65R6Qq3hF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be52b30568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4910ed92fa17a59a28ecd91c7c3a3ccf","sha1":"92555cb1d0d622b89f75517d149e461c5c1e9315","sha256":"359ad2dd8e74f20917fff4060d2074e96f14e99d739d811ea9093e266da78b4f","sha512":"d53cc76fe6fd453cc1a0f7120daf440420bd6229930202f9b6535568bf42843b42ad03bfd1889e4e5eb40a6b653871cbf062da14a7ec10066df0e4cac4cfb041","ssdeep":"192:ei7ZTsphh8vS0z0L+UQPAh07lnaaxY3ncS8PFuUUbu3+KayiP4rYxQmtCbmW:eusphSAs20taa+UPjU3yiP4SCbmW","tlshash":"5e12b0a586f21068f3ce4cf3085288f591fe644493b79b46f8db3c9ea4c29850c7523a","first_seen":"2025-12-22T08:48:47.362415Z","last_seen":"2025-12-22T08:48:47.362415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/asphalt9.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/asphalt9.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6456\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1938\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqiDs%2FAGyZ%2BNMxnf29L%2BJDFeS%2FocTkJHfPkMxOMedL7JRLQosqcv2kacDQBh2AxUdeQ2zBk1iA4mHRCe80Ndm3OGpsiUz2muuWuZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7dba6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7338c24c5e585590a439cc63c3ccfb9b","sha1":"c53de1b7c7aa92af919d49b89445425bce0e6e08","sha256":"d1921034d77ed77d9270a556c2d049f6e80d1a4f5c68a3dab56f42383b33d9c8","sha512":"34886083e047ab8e86d0bf94c7ff3c9864fd5cfd75ab8ed164579d851aa1a7a2864a35c89e0cfe262b1cbcbb14f50f6cf87262be4a40ab6ca40c8be546c508b0","ssdeep":"192:xfwjfGS97FFTAHFRZ8zKI03F3qLcr1hnR5:xfwX9yb53qIrrD","tlshash":"b2d18fc01b2c9f68f3755cf5f122ea48d9e4b54e074a8817d4fa0e757e0ac8469d10d1","first_seen":"2025-12-22T08:48:47.364528Z","last_seen":"2025-12-22T08:48:47.364528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:59:14 GMT\r\nexpires: Sun, 20 Dec 2026 10:59:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164941\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-05-09T08:58:21.358102Z","times_seen":4696,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":191,"dns":4,"connect":22,"send":0,"wait":12,"receive":3,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/provemu.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/provemu.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2408\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-968\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dL66fXdr2VJKv5d0e4FfvMD2grl18zKzedclU7sGzi5kak8RlOjXRmISoGidp9KOnnrcr5j9Q51W6KoNO4Sdj1UIAQPpRVTXVze1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18e5c8461588f3b458d7eb6bc65658e4","sha1":"90a12132b2b28227654f7c31785287192f31016e","sha256":"9d2bf991d3b7b3bbd4e6be761106177afddbbe19dacb6f5d44ffba40cf631987","sha512":"a2646e83deab694da9a69849f797b461f946494d265e34ca87f7e833ec4f9d577b2d2358322d4aaefc64bd30ba09f0d9ba8dd0a7810cce343b01133cc0ae3654","ssdeep":"","tlshash":"b841086ca365373df212be3023d08704a7f53e8fc572962e86c086361e087899c241c7","first_seen":"2025-12-22T08:48:47.37238Z","last_seen":"2025-12-22T08:48:47.37238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/simcity.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/simcity.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6600\r\nlast-modified: Thu, 22 Feb 2024 04:14:33 GMT\r\npriority: u=4,i=?0\r\netag: \"65d6ca29-19c8\"\r\nexpires: Sun, 20 Dec 2026 12:48:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158393\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k83E%2BV%2BdwG5SNjVb3uRiEafctoAXQlhvgKRTtDy5EdPCcBqfaTor3Hx4pEYiZ37KKMFibfqe%2BawtxUIjqcofjOrpSHa7GUqKj%2F0q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d28c82f05e5fdcd4e18d60c6f5ea816e","sha1":"7cd5aab58910cf3fbc08f30495d9f0deefb870f6","sha256":"5a00052baa9e1afed4b13470df45d41edbe668bc973674cc0c7284eeee12fa12","sha512":"748c4e4de701d95545507d61a8d0f5543fc8ebf4927b8b4e09451157499e50b7cdedbb0fde0f799e3ae3683d3460d73c34753bfc6648bbb82306c8c1a7be9dfe","ssdeep":"192:LKoymGuls07575SaB0lJOnyZhC+Dqf6kRpJR6FEJRTA:nC1oxyn9Dq/RpJR6FEDM","tlshash":"7ed1af8589fa763afbe090b18ce58f2a24427e62c9c23487cb809970d60d70885fc726","first_seen":"2025-12-22T08:48:47.374788Z","last_seen":"2025-12-22T08:48:47.374788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/blackcover.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/blackcover.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8318\r\nlast-modified: Wed, 29 Nov 2023 21:44:51 GMT\r\npriority: u=4,i=?0\r\netag: \"6567b0d3-207e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WBzsaetldlAL%2F8imcO70mw5e%2F72eEXMoEfZxHlNKkcDlFFTb%2FDizOtrjWfv2Th5kKyrWHNtbNY7FhCa06ipZzfVRovRAM4oR3GX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baf1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8c890e22a08a58ca8b78cc3cdc52faf","sha1":"81a7eb984f8836e09e128594359edb83c0c88d47","sha256":"12fa0b1e1a2111b51b7498936a1306cdff440ad496f0a42c638c6b9760c67b92","sha512":"e4d302da1c61056eda3799b70c9e138036b52f2a7f33927dc23367d0c710584b81ade8bb94da2474fb4a28b6b5f31e354e63d95ee9e5e828f0f0a9505b48908a","ssdeep":"192:0yNsVgt2qpMomGDIgLG0z/vJCfWZ/c1TEvwZZjVxqL:0yAgt2OUGLG4vJHhcFEv6xxqL","tlshash":"f8029ec4baf2d026c234e17f211886555a188d9ef1afde39da7f3897dc5c582820db87","first_seen":"2025-12-22T08:48:47.376925Z","last_seen":"2025-12-22T08:48:47.376925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/shadowfight2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/shadowfight2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6162\r\nlast-modified: Wed, 25 Oct 2023 03:38:32 GMT\r\npriority: u=4,i=?0\r\netag: \"65388db8-1812\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Brczm9jz%2BbKKkCHmCRW7dV%2BRLtow2unbJ7Ks7FoF4tCLO13fzmlJihv9cSTsOk2ab%2FnFhvYjuwGeMGcl2tn0HYJfDSlIh8%2Fa%2Bbs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3fb04568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15e3e72f3fb3d2459a8b8b106fc676a7","sha1":"dc73ab949cd045bfd09fd0941dede974398bcbc1","sha256":"51f98ffe279d0e891338bd3dad44809d3a02c2dd7a2b5d1b8f809dd9642ff472","sha512":"b09efbd30ff2f8da87d573fd9ff01d96f79f5560ec4b6dee8389df33b866f6774a1d500801e9e3b1247f12fe1f1f2c06674d35f264bfe6f697bfefb182bb279d","ssdeep":"192:J20r8GQL06HWWcuos0X1hldKQsfkRtBWDrx8/:EK8lRHWWpHkhl0QO4BX","tlshash":"08d1ae8a5a56638fa2b1fc3f174c7a4c956f22722f5cd792763131f82196003e72c35a","first_seen":"2025-12-22T08:48:47.379028Z","last_seen":"2025-12-22T08:48:47.379028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/yuzuemulator.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/yuzuemulator.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8882\r\nlast-modified: Wed, 15 Nov 2023 03:25:07 GMT\r\npriority: u=4,i=?0\r\netag: \"65543a13-22b2\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWaVvpSfp0ge7rh1j1%2B5G%2BaDSP64CZKtANF8CKo2%2Fb2LLH%2Fy74LAufcihvZ1Y5gbI4fSo7dNPKtdT9Orc4riS9rxF7BKfX2%2BMMDd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be49b25568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"7886489681b4a68d9487aae214a559dc","sha1":"3b26a9b23beb30fde9e30552bbeedd9841a6b908","sha256":"ccbc9a258d58079201d2ac9c9bf0ad02a410160e736c7a478465eeadc7d4f87c","sha512":"10d023e2a736162c7f962bdc52fbb9dbcd529d5898a0738ff443438104cd8ac1b9376203b2a1ba6368d2d379b1b80d60fdd9d0a36388dee2d608514a89fee101","ssdeep":"192:yculouwigdGf32lM49LdloMuqHZS0nUJfE/z:ycGW4ePzQqHZS0nAo","tlshash":"73028e08b553df8284ed5b9521f7aadf735fca9208cfc02262b3611615162ee0a679cf","first_seen":"2025-12-22T08:48:47.385935Z","last_seen":"2025-12-22T08:48:47.385935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carsim2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carsim2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8372\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-20b4\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITtYd8pFfhr8wZldkNqMUZXZK7%2FH3wUG3xPh9yOYwX5EaYVFPOL55x%2BbZ9QG6dd6TTZZSbItHdU788KwRWYtq2UJP31TKAnj9u86\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be52b2f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47ee1755a21242a686ad735f0d638fc4","sha1":"7f025277b45d8da0b8cc8d31282fd7e67fbe5bf6","sha256":"baf2c65f5217cffd04751842997603038859c49e9ce89456c6d9998a2ebdf1b5","sha512":"667d3c3583d5f5862e73215979ca615d77165151d56fb672bd5b28fcf38e47b7e06bb0992e82817e4872898454d2e5f832d60efe46e97fecd047895efa1b47dd","ssdeep":"192:UFsgy5Z+rW8BctyWFgI7K0Hhv7rxwQ3qWZ4UoX+1X8xRRinC:UJMWTBcz7KYxC2WuO7","tlshash":"1302bf1ca5497cb6c8d58fa1f634e849bfd7d56a220cdec371cace0fac48e6e4140928","first_seen":"2025-12-22T08:48:47.388299Z","last_seen":"2025-12-22T08:48:47.388299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemmo.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemmo.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5198\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-144e\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JnbfVaTYGgx%2BLhJwGiJbqAyOWHsfJDLx2vCK8ghf%2Bg6yFAlzV7gxo9wislwu2NZHZYUI8MHMa7JyvBSrIt3hLffa6xkYJ3ydugT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be53b35568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7a23c8a453fc69d34bf7d632e8bf8da","sha1":"4735aa3f083a6331c5d9c6876dc780f1cd6b49f8","sha256":"ca4242c2b4e97d2a1f7cc1aecbf0409e6c4d1d68e17fbae7a60cbe5d68e6be21","sha512":"007479b80ef67ef2d1935d81a1abca06fd381263277b842952b61004ecf4f76a1c60bd99cc1942480c798e7914ab3935d7d9449ce612404212e572cd854f26b2","ssdeep":"96:66Elbw+isJII2Bt47RBaX1NwT8NfLHCtENfxsKpm0jDfvC7vueujCKgY:6fw6I/Bt47PaX/hisf+oHC7vurxgY","tlshash":"dfb190a2977a3165d9290330e1815325b6f4b799c499d49d09c407e90fcc1dc497cf5a","first_seen":"2025-10-23T02:54:44.857204Z","last_seen":"2025-12-22T08:48:47.39052Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/palerain.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/palerain.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-73c\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNH9dPXf4ubN0ZU3lSxBJwKHbfv2Ge91wIgivq7LNU2cBIgL3OBpHgAStgwU3Qs9TZ5RjInrm05UF06b%2BbWI%2FTAwZlbvhy2KgT%2Bt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be59b41568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b303e4c3fbd999b01baefe0ab4dfd2f","sha1":"00e1acdda2ecb102a3b3c07a915c7c54b3f0d0c2","sha256":"a9b9f5573d510a3c6784122f657b6b4b6c7485fd466999a823a3c7458f04d5ab","sha512":"7482923d1e9ae9109ee427a40a241a5daa512fa81348d0b9dc373f108a982b22f50f54276a860cd1b9fe32d536e343b6892632f92eeef3e903de3210b47f1b6d","ssdeep":"","tlshash":"ea311832c3792b39dd293bb434997f11833c7c568ad283198ac046709b108ce86edb8a","first_seen":"2025-12-22T08:48:47.391641Z","last_seen":"2025-12-22T08:48:47.391641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/shades.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/shades.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4462\r\nlast-modified: Mon, 13 Nov 2023 03:41:31 GMT\r\npriority: u=4,i=?0\r\netag: \"65519aeb-116e\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbFqWgIJY%2FrP2D8gmjNbqFZpCwMIkqHOWven%2B8C2RpNu0EflddnGfUpF8kNHwjCmK7kz7HoUjNS%2B%2BCxsupuMIGRMB5Y7%2FTdsMC3w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3fb03568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6c52b59e12e474d9d5adf82b778f5b8","sha1":"923bcf72f712816d2d1282110105b64ef876dede","sha256":"9e8bfb9f3fcd99739b3877566dbaa9a5b43ac574313b7abc2f5bbb7943f9a1f4","sha512":"07f067fe69a99b68580215d1644568a43b4f5a433d5f5481fbc08c1e723a4d1985e26597bca2edc39e1ca3f2a16b23644bfb959fdb31200016159583073a5f53","ssdeep":"96:mVOgK4UHx78rIj6/sQ50c3b1ivUGSDpkEQnL/8opi:mV/ZUR7Lj6/1n3b1zVVkEe7tpi","tlshash":"b9917d99cae803a6c3cc1435508b0b2389d1edb2e1c5eba5e5aae1d6cb069031b7407b","first_seen":"2025-12-22T08:48:47.393485Z","last_seen":"2025-12-22T08:48:47.393485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/arenabreakout.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/arenabreakout.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4580\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-11e4\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvcBX2Z09wbd3ylEFuV%2Bavh6pB0wHgjh5xub7OS73%2Bt0EpA%2FoQsUWt4ijlKTcta2DcAIFvTls4l5hdhB7tbGRpGYWGPE9JQwC4KE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb4c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18615e2ebf565c92e452595cec9184cf","sha1":"039ea721cd4a791958a6bd14ee8f91d016d9ca54","sha256":"33f9cf3e23fc5781cb64fa09038cf347e4fcb7cdcf9d7672493f3c2f12a0cc33","sha512":"d1335fe79f15ba838eca146941595b344fc31719acb7143a5efaa09cd272a577bdd61662395bc76b97b645a0c847369fe36207dcefcd400b46b436d7d6beb955","ssdeep":"96:s3o9F58bCRZ/uBNLvqFNHCa7SuOslUWpcSCtckEgIR8k6Jsfqq8r:s3o9ceR8BNLSFNHR2SlUWKErLasfi","tlshash":"8a915c3487a440e3de5a09f88cd1ed1908b1b14e5306d9c08e3d512cbd9246b193e776","first_seen":"2025-12-22T08:48:47.404495Z","last_seen":"2025-12-22T08:48:47.404495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/projectorapp.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/projectorapp.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1422\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-58e\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1q43ecHnemIWs4E9e8KTPommOVd4AQZB%2FGr6%2B3fPSzk3o1w%2FNSq5sqmFjekDIKtHxfL3IL8r0xwIvOYhs9S5F%2BP2Vsxw0x1swDl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b62568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ad6f0d502ccc3ef53abf9ce5732fc6c","sha1":"47d26d70d02a1e3602e591414d403018e46e06ef","sha256":"2a4e0adf082b18e3da5b5cf5e21e38206fb93922e54b24d4d8c220d71d2ef5bb","sha512":"09fd1415241e1671cdffff7a1e1caf0812e9b8b63281b38a2bc3c41594cecabbe34e07284a051ffb10e3fbb16af460fa2b661b0bcf069b02562e87d0e295ead6","ssdeep":"","tlshash":"9421ba906348177ef29497fc31501f83a3b43a2d874a99d3d1d559762e14dc89d48acf","first_seen":"2025-10-23T02:54:45.595502Z","last_seen":"2025-12-22T08:48:47.406829Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/coinmaster.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/coinmaster.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6146\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1802\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pQSffvOAX2vbOHDZ7HLy008gmJNVobvc6GXuJ52GCTUmRAyEfnvqS0rlXhhRHGlnogL3DUhxVoXnW3T%2BfVaB8Iqntg6BY8b6fve\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6ab72568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c00c5e17110496f333cb2736f92c506","sha1":"b929f45aa5d500ab5bdf57e33db998608795070e","sha256":"08d4aff426ad348e314666cd0ada03bbfc0653f2439ec00a5faecb6e75696d39","sha512":"e5de29e14c074d5da557ac887f92b0dab0bb8de8c3884c5f8f782375de563a01138a69539b13233b1c5c64628c1224826cd03fd406602ab08ea6990eb89f65ca","ssdeep":"96:B6Elbw+i9nHSshledkucH+wwtJPo1gJEcjfFJlPpZ3ltiJd0VzIUzHe41:BfwxHReGBcEc5JlPvV0Jd0C8eg","tlshash":"bfc18da84b25af15e2515ff158a023a6f355fc8a660df28288441caa3ded9c1ca102ef","first_seen":"2025-10-23T02:54:44.679449Z","last_seen":"2025-12-22T08:48:47.407793Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/ps1.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/ps1.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8070\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1f86\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Xl90uvs%2F353UPD%2F0OwBjEqpl%2BuSLs9bFKbGdw4Ru7lDvedhP%2BtdeDN%2BdJ6BiYJbhhz86kReerxTq9p6shr6fM6izYAZtHRlGBuz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6bb75568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"334eb82a68f4f1d2fd055c28bc6434fe","sha1":"0c98f6d0a1717ed780d6955accd2250b1eb482b0","sha256":"4a44787240ff85a88d350ed4ffae5922a351313efeed8f1f6ac526dd21837d20","sha512":"18a7b497822131111f6f6980946e201b4fdb464b032a40675b42f71cae441a287db9cd7a3350c0f2990aab746dd749a2047519462ff14dce17bdc4f6d8c88669","ssdeep":"192:hAau2dYUyX4P2UBDSp+ayhJSK11XSaocgZb0fd:3iX4P2MDSCJS4wRcgCfd","tlshash":"0bf17e5a7112dfc1c4f6295468f742173a13c477e5d31e9809bf8062a0ba27e56a32e9","first_seen":"2025-12-22T08:48:47.408698Z","last_seen":"2025-12-22T08:48:47.408698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/eclipseemu.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/eclipseemu.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1836\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-72c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M4fh2MAx4J2WDfRu9IvCpYXS3jccpDOYBQepk5ECTnUZgqRYfblbqazoxV%2FS4p5e3aMOe%2Bvwg1Ylu7xaFB1VPtVHnoBr6RE41vW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6eb7e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bcba17a3003bb5cb7f7563f02e7ef0a2","sha1":"bbcc2bfcb674818c3e5ef7d9b75a1155a9afda3a","sha256":"780b90221eb5dfb8895c89c7178052e24de304be0b2cf4c1ad7ea1b6215e44e7","sha512":"77a5d5dddedaeb9bda09e6b05a1169f0cbdb568cfa746f24d79f99bf591385a5c96faa77b1e07f20cd6588370e81dbbb807f661ccdcd6cdf10ab960123714090","ssdeep":"","tlshash":"a431d824436a27ace6164b7494e80382d2977d1aeb616b9580c053191e34b85addc6ab","first_seen":"2025-12-22T08:48:47.41089Z","last_seen":"2025-12-22T08:48:47.41089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/googleplay1.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/googleplay1.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3642\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-e3a\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUIFOlZY0A%2FgbVQ%2BB1KZpB7qyf1dNYi66uP4BAxQJFl12eWarh9SBY7frKLa4TU8UD2ZZYIdIW6XWz1QH6DgFqTuuG0cFcErcyBI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be75b93568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79d05bd8d24ecd44321906467e29b2f5","sha1":"387e22ebf9f1d481f2cd6ae27e613f63e18ac1c4","sha256":"fb8ef5c01d9000f54cc2879a0b174d27203031bd1940ada97374f15cce53dc67","sha512":"0a82f8769cdbf235f0c6727a6f75c31fa5c4c7676712d4ba6ce1698bd3be6719b67c3aace00b484b69b64a626c926a8690c48ce47beffe0cb00da7632addd4f3","ssdeep":"","tlshash":"a6715cafc3302ba8c15c05f724f91748f1628d018aea6696cc7e82e0eb851d2e8707c6","first_seen":"2025-12-22T08:48:47.413087Z","last_seen":"2025-12-22T08:48:47.413087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/js/jquery.magnific-popup.min.js","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\netag: \"4efb-603f13f420188\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xbq8N9U3fVL%2BnB5%2FV%2BYYkagYICBKJy2FMO3nFIV%2FV%2FU37SC5KMOxHf%2B2%2B0qqMuIxtqDOfR%2F8rSr8q0fIveEFyDS5s7LmAJAa%2FzCv\"}]}\r\ncf-ray: 9b1e5be82bb6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-05-09T09:46:33.696073Z","times_seen":21097,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/css/animate.css","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\netag: \"13de5-603f13f44ef9a\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgtNa%2FCVwjuAqMzDzjVf1UEajUE56gtz9D7fGCHQduScHV1cPvxb4VtGPMkeEwOYVR5fCoDAXSEjKU4C%2FT3hbuJw2zxXKRBq2%2F5W\"}]}\r\ncf-ray: 9b1e5be34aca568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c9aeb6363c02cf5257f1d8f850ef22f4","sha1":"0281c0353ad40d72d8c22468bf3fb471b39040f5","sha256":"ed229a57e697e1eee579a1bbf898693bbf6f4b2acfa05f29bf30081db504fcca","sha512":"92e1eb652bfd8a6c0ce74aa1a2d9351984ed0be29b9227a1bf528283360df8badb2e929355b860f350ae8317ed05e42647ee1ac8cf1063ad6572c2bb340f6551","ssdeep":"384:uQ1Q14x4121e2W2/NlNCHSH0lLC37nqMOjTrm/X532KoNi4oL4T2:n1Q1j121MHSHD32KoNi4oL4T2","tlshash":"44831d6e184111c447b24b69d3de8e6ceb3d917318121eee72c2588f8fa6f6853cd94b","first_seen":"2023-04-11T21:54:50Z","last_seen":"2026-05-08T15:56:59.465756Z","times_seen":237,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/callofdragons.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/callofdragons.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10436\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-28c4\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayswGISJNGF9AKLzLsdv6jJBh%2FaDonPnJ0l1RIwEszr4GLKFwmwl66NVQQsC21o1JpgbClRhwWiaTVWSlElcj22w9jgIiYpkYIj7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be38ada568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c4414072360de4c135b965c7ef0d197","sha1":"85425874b5109a8e6cbaa8cb5c3b33331a172a37","sha256":"a8efd946d850834e3e80e4c9455a48826f2e52533fc569d8a92be6aaafb45199","sha512":"aa00f2cb1f248fa84f2d49118ec298a144d62b6c8970067ac377e33bd8af31b0250e0011e783995ce8871c413bff681d57c8e02865c651e2759607e09dbd46c8","ssdeep":"192:4fw6GmR/2M5p6itUeUDm8La5m9QlDmDYOVei1EE0mVms3vIC9/3CbjdAnCty:4fwmT36itUeaxLL9Ql6MRvEJ93vI23Cw","tlshash":"1722bf314b48db3dfc4465f1205d00fabba72998e47d882494e7292bc52f1ea318658e","first_seen":"2025-12-22T08:48:47.416705Z","last_seen":"2025-12-22T08:48:47.416705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/monsterhunternow.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/monsterhunternow.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6672\r\nlast-modified: Fri, 15 Sep 2023 03:43:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6503d2e3-1a10\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwKVZVk%2BzE6u8zYmfTk2SEJjenO6UOItsBhVQXI98YyXKq%2B5METRhFE4Z%2FF9JRDtyvMRewyutBP8FJBVrC69YJupuUG%2FjQTOuhMi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be43b13568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f2c9b9a193abd214cdee7dc62bf78e74","sha1":"2bb09c0d1ff0b3d8b6106b9f499540560bab5964","sha256":"10b5c5454d8fcb4b0f9c95f4aeb1d3bd29bfe62d421ab7620c720843c7528560","sha512":"a78c205d8e40b8fdc37de9e314a423033cb5ff4dc3c8c18ea71c493b85704f6e19ee2b08dd8a3d524b6b395c4d1de4a3d949c1b26adde53076210ae0f51d2dcd","ssdeep":"96:ji9VtcZuygXg5zTtCC/TuMArIeJz2xEHdh6SkJ6RBUqMMXnRL+eykOuP:uiTNp/CM12z2xyH6SkJ4jMWRKeRP","tlshash":"3fd1afc256cccc6cc26ef23b228d537aaf10d559a1f4821069aa8d7bbe633309a54954","first_seen":"2025-12-22T08:48:47.418834Z","last_seen":"2025-12-22T08:48:47.418834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gta.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gta.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4752\r\nlast-modified: Wed, 15 Nov 2023 22:20:04 GMT\r\npriority: u=4,i=?0\r\netag: \"65554414-1290\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QriPA0Xbm12aQfxOFqv4YxKwMRc3FdYvfBICzImxylSpcdXMIR8F5nEBisQNGq4bP8jRmhwr6WP8bnSI%2BXAGy%2FN8393pmM%2F7tSIj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be47b1e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6db25bfca6158b8898604eeef7f0aa8b","sha1":"6f4a8d50e64c4246181a77d9e244867e76926614","sha256":"bbf8f0661ec7451086a8bc54abac08c89ae8e92af9d8359f4f4dd1013656a3f4","sha512":"a6c615aa58492a1d1fb4ef738fce3fbdf15ddfbf5b296b8d66aad92b67f06b2e9932a83756f8d5517b822e60b996729f68ce4166a7b46fce478c471d7f44c77f","ssdeep":"96:tmlamAupFSat5Y9NUV7E1Gzr1BMmcigLGwpklmBWrxCzlr06w6Wvrf/:tSarUFSfyg1GzrbkGwpklmUrxA06w6Wb","tlshash":"f8a18d6e68e13bfcef32e5b915796ace3323980d59320d805fab6379d929002b331021","first_seen":"2025-12-22T08:48:47.42062Z","last_seen":"2025-12-22T08:48:47.42062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dragoncity.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dragoncity.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23580\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-5c1c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOwU9FUf4fyPYMMAzhz4hid7dzhLS%2BSDtCahwY9zny%2BD%2FErJjRPT63ur1vQWhh8BlHRb2hxjtAg9GIgPfvo6UjY9%2BdgkOEB7mNis\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be53b33568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38ba2aac704eceb799141f6b4098c3ec","sha1":"ce185e5e3aae562e9c51b0581745f410f01f985e","sha256":"3954adc153626948beb6c875d2aa4482a05f7e5d7dba8ca19c54b2cbc09dd76c","sha512":"ed0c16f07e7d7db0ccdb1f12dba774690231d0b1ec660ffe9b13313013c7c47bf02f7547a6df3d4b78282392a86e9850232b7c995768af1e6bf130669cd8abbd","ssdeep":"384:Kw4K+slEScnKQOvVaeyA5JV8O9PQ7EmGQxhBbyUw2FRCpd4rmSHduMv4KON:rh+AE6QOg819Q4Q3BbyUw279Vv4KW","tlshash":"8eb2f11a33e4def5ce26e8ff1392a354832db34959703582b799241a6444e313da89f0","first_seen":"2025-12-22T08:48:47.422449Z","last_seen":"2025-12-22T08:48:47.422449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/microsoftrewards.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/microsoftrewards.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5906\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1712\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HkbOLu2TbI8knhotPgUPEi9vrEcCJaf5J0cMatZePL269nrOuhuMUSHHWe8r8mN0Y5eZHEZibNHPjAXvBLJLjIMlNYwjvwJAVP1w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be67b6c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e0cd23d7de648cf00b04be4202a6960","sha1":"1bb897456e09212812a53dc5eb64b6493282f1e2","sha256":"5edfa5447284023d61113e30d3ed40ec9f6ae13eadd1494f81763f5ecd5f148c","sha512":"689aa4a01a74b70435e881fa8837ccc9a88063bdbeabe99b2844a8cca22f1c7d175f8790daab583542384979da7200ea78ab19ccedb8c3db612adf81b426eab4","ssdeep":"96:mElbw+ip59JoKLyYtkMEU2kouu171wZo6olIGsqJYDFj6yhfzn+7uIh5NdpNSOoJ:jwH9JfeYtk9j171FIGlv7uIh5KFZDwi5","tlshash":"57c19ecc8b685ff4c26956b8e061579462b5be3fc265526bab9101770f4c188efc6882","first_seen":"2025-10-23T02:54:44.697805Z","last_seen":"2025-12-22T08:48:47.424162Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/clapper.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/clapper.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2344\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-928\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6QgQksxh4IYr1zBgnyXuyEdeADPdh%2BaphSDCs6liOTAQZbFcHtWHKvQwWhzGK8Gn%2FAABJExNgNLGE4VkmvdRSjiLNBVtsVWsUYc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7ab97568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2344,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57f3717cb0366dc9a5e82d84032a1c9d","sha1":"b1fb26ee84d93ca927fbd77f8b1de090a4abd028","sha256":"bb0ccb3737e0daccb323fce95ea14af9366f4f5b72002e448930f8ae6dfacfae","sha512":"aef0ef1e5ca187a93488ae49b40602026a4cd380fe6f30e3e4ee413a1b34a156d6074ae8abe79e7d4a0323f14e13f7c0a9218abe8ae931b4cdf6829b2ba4b227","ssdeep":"","tlshash":"ee412b6457145374ee38a5bd80024f83f1dcfd2f436a263190540b7cde185e2364edb6","first_seen":"2025-12-22T08:48:47.426096Z","last_seen":"2025-12-22T08:48:47.426096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tiktokunblocked.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tiktokunblocked.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13502\r\nlast-modified: Wed, 27 Sep 2023 22:46:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6514b0c4-34be\"\r\nexpires: Mon, 07 Dec 2026 20:12:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 1254956\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJdwfc228lBcIGd3O1QCPvI1n0HrcI9S3n3vQzHem4olOJCj43GkMYVg5K%2BHcn%2F1qV3FiC%2F4aGP7nrZQlT3EjXmOUbLqkhBCEdOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be43b14568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"511d45c8fbd5369f09fc3b017ee72520","sha1":"899f0fb3e12010e36014990994148d5c36aca819","sha256":"4520911466a903301388043c2a23bdaf694f7a234ff0295cf689b5833a7e2452","sha512":"d71b433090e526abaae3ad612d0f6c7fa927effbec6e2caa5fc503f62483f6bd10f0e6a470e00edbf5c6b988257650ee709decdec953f4a5b85e2e7af102fb7b","ssdeep":"192:2oZLXXCuFGy2Lve64zcmZKnE50TVYuWEYhQSJ3fQ3mnxdvhKVVyUXp7kdXAaNG:1BC9yqvhG50xYulEJ3fQOvAVYUCdXPG","tlshash":"0752ae33e9b2aba2f55f795025fa7c1e0e074c4041c3fa1ab4f5ca43a8b50645ed4aad","first_seen":"2025-12-22T08:48:47.427694Z","last_seen":"2025-12-22T08:48:47.427694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/alieninvasion.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/alieninvasion.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5646\r\nlast-modified: Tue, 28 Nov 2023 02:36:48 GMT\r\npriority: u=4,i=?0\r\netag: \"65655240-160e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5%2F%2BfRz6eHbz8Ftc%2By2ZbQ4hCm5xqE17FgGiPw9StZGf%2Fs1YPCRqeEQ0VHYUoOzaV%2Bp9Yms67mLrthqe6xJ4ANLoC90udKAXXYbO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be48b22568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec58fa8871f82b0fa9e57364b25591e3","sha1":"c9f58eed461de45511c680ab1e6039dbdeb10f4c","sha256":"1615981c1eef8a27230349f82545204226717366be0009f02b3e65e0ad393809","sha512":"34fdcbd2cc4ea247496fe74d873c7a324cf28a03b283a0c71202d48e70e3f4ca36a2c16ac3b41b6c70cfacb3c3c73cfe7316b80ab006e4d7314714dd913c5d1d","ssdeep":"96:pv4USEKXjC+SnGW25zleqKfLORYYpoMY/D8w7e2NBEAl/zagqC7B87luVFm:+UqzCxGJ5zzKfLdgWb8ETvfzaHColuK","tlshash":"53c19ea155582595e62c03f20a828c6b1cfdc67c11c0f9068294f87ee664a26bfc9a65","first_seen":"2025-12-22T08:48:47.429838Z","last_seen":"2025-12-22T08:48:47.429838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/revanced.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/revanced.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7092\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1bb4\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5lDaXxn5iWNNLOSSOzQlZCdU%2Byulx2zwfJGr27HCvx4aCHll3tAwpTQe2%2FlJP1Y78rN2CtK5CFSmjka6KWn7wsYIyZBJ3yEqp8rK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5cb53568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"ad9c7b542f4751b405cd1636ae6b0928","sha1":"ef63f7ff6fdc9c4a4335fc4c8b04a14183d44f39","sha256":"acf718835d1be45d94b84188a6c51886ea48a7d7414ce93226b5799bdde01685","sha512":"5b9a31e58e529266d8856b278d2e1157b62bf305bc9b47a1314e80b93e9b31724b78043140dcb6c8b99c9a5d9200878ca276e1d7c47326f1660ae24a64fdeca0","ssdeep":"96:p2VadDuSQLANkh4fd7OiwF4sWGoBzTyEv+zTqamyy3cgKbX/KkCW9R2nvU2SxgfQ:IaV0qZY4bGcTygGq5jMgUnH2nM2SxV","tlshash":"89e18d49af5de405fc8d87b7a972dc2749809381fddbbe1cf447849bd8842a429933a1","first_seen":"2025-12-22T08:48:47.431728Z","last_seen":"2025-12-22T08:48:47.431728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/js/main.js","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:28:48 GMT\r\netag: \"27dd-603f19dba8d76\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUGEx9EICV48a3qKBCyPXO%2BpAzXVotEeQhw4E5QvNaTzYz9L1UHHZ8MT0vNqEM14u0uZ%2B0nB3eZwD%2Be0%2BArUbHTZzAIYOgmpohfa\"}]}\r\ncf-ray: 9b1e5be83bb7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10205,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10205), with no line terminators","md5":"fdbc6cd360f6f18aed4eca971352e216","sha1":"f26070b77ef2a7cbcce9707ed6c1a1e22d2d5810","sha256":"6e38783984531346bd62ba4f898fd7caa1ab69f8ba5aef7a5bac6d964319887b","sha512":"703bf763c40b6cb3f24bfe78777818679b4220194bd554687b41217792adb25a5f45fc33b1ad56cde86199032c5a83f8313816bd3c82449168c46b6179344d4c","ssdeep":"192:6tauRZSz7/H5qfIYlEQXiWE7WW48I6mB84/0u0m2YRB//+55/s+7:6taeZSz7/2lBa7WWI6mxFRd/G/s+7","tlshash":"1c22a744bfe1a4cf03c78f7b732fb5c4ed6a39151a48895af202dc6066ca216f992537","first_seen":"2025-12-22T08:48:47.436734Z","last_seen":"2025-12-22T08:48:47.436734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/criticalstrike.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/criticalstrike.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7500\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1d4c\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUA8AKrCbS2glvzRu6S%2BTLCiwpJRxN8ucNzU%2B%2FwY8EwlzfUtmqioi6WuzUpBMD3Kdbq%2Fd9qzrZGZoqGpXEgzycXdkTtNB%2F7xkYRN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be80bb0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b008f9dc5d270980d4f0a88f9284ee46","sha1":"cec0c0d22c4b836893305b6cd67b1e6f79d7d1ad","sha256":"b27255645543f8989d356f3ef02539cf1cb96875d69a3fc662292afe55b7b93d","sha512":"a65f46be6f035aa351938f4fcd27b25d08766477420ad6e18e94bb21840cb12f9e3bf605b0cd96a948d61c996f92637774528f3f4295f0bf3395aefb0be5653b","ssdeep":"192:Jfweyy5exBkdETj1q5j66QCL6uQvqvG8fkirQ6mnuT:JfwedkMdL5W6Q66h2G8frQE","tlshash":"e2f1ae9b53591695f04c17b210e35bb397fabc202fbb826ce22c9050fe07056c48d2eb","first_seen":"2025-12-22T08:48:47.442405Z","last_seen":"2025-12-22T08:48:47.442405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getcody.ai/widget-backend/9b901f91-cfd4-4add-b3c7-07cd8a180eba/state","fqdn":"getcody.ai","domain":"getcody.ai","tld":"ai"},"ip":{"addr":"3.231.135.106","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getcody.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:C9:49:A1:FD:04:2F:AC:B3:6F:C1:7C:96:BF:AC:5B:AD:6D:1C:CC","sha256":"58:23:6D:E4:D1:CA:24:85:26:A9:02:E8:F8:18:86:52:E7:C3:A0:10:BE:C0:10:D4:70:DD:F0:D7:24:93:36:F3"}}},"request":{"raw":"OPTIONS /widget-backend/9b901f91-cfd4-4add-b3c7-07cd8a180eba/state HTTP/1.1\r\nHost: getcody.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ezyplugin.com/\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: awselb/2.0\r\naccess-control-max-age: 0\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ndate: Mon, 22 Dec 2025 08:48:16 GMT\r\ncache-control: no-cache, private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T09:38:22.190078Z","times_seen":14886953,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":433,"dns":18,"connect":97,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.linearicons.com/free/1.0.0/icon-font.min.css","fqdn":"cdn.linearicons.com","domain":"linearicons.com","tld":"com"},"ip":{"addr":"169.150.247.35","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.linearicons.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 20:11:20 GMT","end":"Sun, 08 Feb 2026 20:11:19 GMT"},"fingerprint":{"sha1":"28:48:BF:63:5B:A1:AE:0B:E4:2E:EB:BF:23:4D:60:51:2F:73:E4:9B","sha256":"E9:03:41:F7:E4:02:80:EC:A1:FA:D6:78:33:A3:10:61:42:6C:17:36:23:6C:CC:14:2C:F6:CC:91:0D:20:AB:4D"}}},"request":{"raw":"GET /free/1.0.0/icon-font.min.css HTTP/1.1\r\nHost: cdn.linearicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-DE1-1078\r\ncdn-pullzone: 1459430\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec26292e52e5bc20624b029974bd0adf\"\r\nlast-modified: Wed, 07 Jun 2023 23:52:14 GMT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ncdn-cachedat: 12/02/2025 21:54:02\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: eb75bc659bba1e66306ed99715053234\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7354,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7191)","md5":"ec26292e52e5bc20624b029974bd0adf","sha1":"3756375bb053b0f3f62303597d844f70cef1b5e0","sha256":"31ca8fc4bb190118851959f282909af4a8f6e782b69dcfbe00094ffc010878b3","sha512":"282b62aa79bd9b407cd3241be6629e8aca4f19331ecbf33a6d3c7fa7dea507ed507a729eaecea7f519b6967387bb97f3af0a3f6fe803d9f418441b9cf7a7820e","ssdeep":"96:udwakAhvZFamB/0/Q5pcK2kb2IYT4naMq4kIaVBX1j2qLQ:udwabhvZFdBhocqIYT4faVBX11k","tlshash":"3ae1ece6e44964ccb7b1c813b389a78964eab134d9410e52f45fb51e2cf126b2ec4f78","first_seen":"2023-04-05T15:00:08Z","last_seen":"2026-05-09T06:39:43.907388Z","times_seen":2210,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":54,"dns":65,"connect":29,"send":0,"wait":24,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/brotato.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/brotato.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6436\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1924\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwlc5n%2By0Oo1qpBNzdPuzJ1WFVK5ri7vZx2%2BL8rIFi5Vn%2BQcT7WjrcEd7eBcyFgOOYJK1LGKFomgl9kOkjcNCo5qUMJnRDfjdWp%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be55b39568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd256ceb295e551b4acd69bc059b88ef","sha1":"3721731e756b32f1e6a4899d37aeacabb95da636","sha256":"7524fe56a94b91bc7f1fb7445b8e2b0aff064f5bfaf0b268ce20fefb4e41c872","sha512":"c7a430adbee0d519bad84a733a3efb5a0b9b5313e0ac248f47ff6d12f9a2149d0b3417b3b372e73ae9673b0242e1fe388fdd34798f206fc22ddb60f031fdc237","ssdeep":"192:sp5AD4IMKf8BEQ5cupsUgALLfAmltazuA:srE4F7BE8lL4mlzA","tlshash":"46d18e6ab659b43cf2223a7895663bd1bcbfc7f18ce2b910e0c41153d17d11394386c2","first_seen":"2025-12-22T08:48:47.446728Z","last_seen":"2025-12-22T08:48:47.446728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carparking.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carparking.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9062\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2366\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0zv42l518wXg2r3Wf6QVXd4PlbqGw%2FKqmRlQIB5zK2wUmzAC7pX5J%2FOLK0FpseHXerrYZDGEeF5wmtCe9zq7mpqSiJiwcwewRhL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6db7c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9062,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82547757b52fb98bb7f574a5550328b6","sha1":"3392ce02e6e061bea8ea9d3efd1a821e30f3774b","sha256":"894b42cd54266498595cca0b424558a07076384c3a366b3bb55722311a537de4","sha512":"ee0dee3a36f142b9008e4e35b2468ac9784d15754838d3cdfee8e9aaa07eb2183e2547014a9590938f0abd2e5b16128e24a8465c73e1f087e98c270bd7df0b53","ssdeep":"192:hfw/jUEJyGnbASSopMy1ZyPVi572OuK4amOpgfII/2GM7Gmci2:hfw1yGnxSopM1P0572C4amYgfIzpcP","tlshash":"cd12aebaf33952bdd5627b70f5669e4753f1b3270e05b3a2834baa087e19486048893c","first_seen":"2025-12-22T08:48:47.448709Z","last_seen":"2025-12-22T08:48:47.448709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/cocnew.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/cocnew.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7664\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1df0\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6LprFdzRmEXCfLaJnC2miFL8DI5kO%2ByA%2FZdMRdEF6t1ddIRsqxLejnd%2FLtTjUMuAJ%2Bxo5UArvrFhCvQv48BUWOgwMYl0WbCXM%2Bw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b82568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36721cd3d726503dd24bed3040b616de","sha1":"d982c43b9b31babb178471d57f44f1f307e35eae","sha256":"871cddc07cd899c2b7410ff3b4021d0f22f201de69f18db21f2681b0c13e341a","sha512":"19cc411ced71b9f60fbc21c4d158ceae2ae501b929dc3d69ffcaca7912df849f904e022e2ab42aa5e28b808d72fbde77080192bb812af49d3e25789946391205","ssdeep":"192:VfwmkQhjsY+tIqLPSuHMLZUwmfmhpOYqiCGDZOW+A:VfwmoxtIWPVsdb/tDKW7","tlshash":"8cf19e76920959ecd6cdd7f87d419cc6e3bae85d47873178419ac186cacc0f09aac116","first_seen":"2025-12-22T08:48:47.450953Z","last_seen":"2025-12-22T08:48:47.450953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dragonmanialegends.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dragonmanialegends.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6718\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1a3e\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKwbCuG7CI7iqW21ZXBUUCjxsKk6oCKMv9xCLI691ctvRKm1ShaYESBJpG%2FFGBwF6%2FJqtdftx5ufpT2JJWScwZuS24yXAr5vKy18\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be76b96568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"270c0226d320a54eb359331fa9b56462","sha1":"395bf6280403c252c33b45b3ce028c2b0ff633b7","sha256":"a8d7a65fd801529507a7a157fb5594b26762d1e07cdb128ad5fe9692e21fdb77","sha512":"d28e5d9da686f448e212c92484c5e6abdbdd0133837669fb85a7de6ff6594a381e63f09aab965cf93850bd3bfee9bf2324c37437e33cb66277444286223363be","ssdeep":"192:Mfw0UrbOP3o4M9cVq78itjBYap5sF6O1xo/y4:Mfw0ago2YPYansF3kq4","tlshash":"47d18d4b92ad9a1cd6e037f1e004c3b7f7485e258a955d9bcfc547a24e28bc8c0a318a","first_seen":"2025-12-22T08:48:47.453392Z","last_seen":"2025-12-22T08:48:47.453392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trinketsofcody.com/cody-widget.js","fqdn":"trinketsofcody.com","domain":"trinketsofcody.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trinketsofcody.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 10 Dec 2025 00:00:00 GMT","end":"Fri, 08 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C5:30:C8:90:43:72:1E:A9:FA:C0:FE:D8:DB:30:FC:E6:BB:B4:38:92","sha256":"59:54:22:7F:67:7B:82:82:7A:2B:5A:C0:00:7D:64:4B:53:13:72:2F:F3:0A:5E:55:B1:3E:E4:54:CD:D0:80:E1"}}},"request":{"raw":"GET /cody-widget.js HTTP/1.1\r\nHost: trinketsofcody.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 22 Jun 2023 01:57:06 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Sun, 21 Dec 2025 20:41:00 GMT\r\netag: W/\"807799691667cd820224e31266231374\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: eFHJdSMjHRsJqlmjCZsFf4KPMkee4UadmvWcm0sTt_gTza36VAEmQA==\r\nage: 43636\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1507)","md5":"807799691667cd820224e31266231374","sha1":"0c36eeeb65f1e3833ff174a865653e112e4ea8d1","sha256":"633f1f967b4f5ee7e416ef0e55bba983e657bd43971212f9c6ad9688895e6c56","sha512":"754488d2cbf71d085f66f0f60f3567d5597f5c64116a68b58dae8eb8933b50059aa427a1225e897792d505ee96196ad68ba47d6a60167f6319294ff903bd8d94","ssdeep":"","tlshash":"fb3120b95535a732388601db76b9b3a8bf65392cb112082044bcdc19302ccda46bbf98","first_seen":"2023-10-24T09:40:43Z","last_seen":"2026-04-30T23:55:53.10003Z","times_seen":21,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":306,"dns":27,"connect":3,"send":0,"wait":3,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/stripchat.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/stripchat.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3560\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-de8\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ORLlifestJUJr0Oh9CZczwdzhDcMKl2zQJ9Pder818%2B9wTxkradVGRznSak5CPVP7vFw2FO9%2FwGbVstF6j2eTJtlDyuLkHOHgQiN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dde2ea3c0bcc550f5c0686adf53e15d9","sha1":"665fb5ce5708a1bd48bf9cd8f2bedc602aaa7cf6","sha256":"12d937fa0868f5bcad73dbf0f887d3f046cc783438377ebd57bedd666887ac32","sha512":"5cf3ee5db9ce35816d9805a6b90fa557e687170e18d39bd23ec19d9933825574a44af435b357a09f1b33febd97329a300556f678f5c2b7447517ec5b6c8e1f4c","ssdeep":"","tlshash":"b9713d746b2153fcf99801b0789126077b7e58595634ea5f0083dbac0b698d64a2c945","first_seen":"2025-12-22T08:48:47.456122Z","last_seen":"2025-12-22T08:48:47.456122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mobilelegends.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mobilelegends.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8692\r\nlast-modified: Wed, 14 Feb 2024 23:49:00 GMT\r\npriority: u=4,i=?0\r\netag: \"65cd516c-21f4\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8vwErtsAOpY7UXGLrU47fOLpVz39Xl%2BS8M5Y4kfqMeOVJhMBk4GqrbhYX5zKYuy5tFXSMZGRjTEs%2Bdp5aDX%2BesNdtxeIiPXuTE6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baee568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e11a7940e863395e6b20b34e2f2355f","sha1":"8e4a913c834bd6eda52691811e5ba7e74a4b4e8f","sha256":"f9b559bed7e5326b3094ba7a56b4c66e741ab7fba6f79a66b8b9db434697c0d1","sha512":"c919ff22753152342b5d0ce267aea6b0c03d2fe01565fb63dbea4d83f2c885c3ed4a36e90b1dcbdd90ea9ec81f95ebefd22ba4faf3fddd2b45bde92dde48f92b","ssdeep":"192:jQjNF0I3A7EMr7DteJ6ak3b0duz/PWtPhhBHdAKVNhLD:sHA7Dr/ta6wKPWV7B9HHh/","tlshash":"7202ae82a491af02cdd233783d7513e7a2477408a5667d444e773dee77642eb1bc6123","first_seen":"2025-12-22T08:48:47.472045Z","last_seen":"2025-12-22T08:48:47.472045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mecharena.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mecharena.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6080\r\nlast-modified: Tue, 05 Sep 2023 05:30:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64f6bcef-17c0\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlhbCSBFY6X7Wvn6QQy0f%2BB6Jlu9jt8Vu7zwvzSeBHtj2ma1a%2Btz2pE%2F7jov8YmLVvigSipJ4FAEES5yu59ZayjP%2BUz0h22ul%2Bty\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be4db28568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aaa0c4636a0bb9e2325213fbd3eb4cce","sha1":"8e3c1bc9527440921540da29b4c4faaaa1ddf898","sha256":"7c0bef666cd7db965ab82a3e2f396388f38e1f0428537cc899db57decb0c95ab","sha512":"3e6fddaff1dfc4cf9fb5f255256a8a8e19f801be00117d36cbc313311fa81291fa39ab9ee949ae0b8c9dd5db62aaa0cbe8da67e5a1320577c7c9f5ea8822f2d9","ssdeep":"96:qQD6T9hOQceZLxEmA1JyRcUj4MvvL0iiXzKw9+hlGH/e2J1UCfGIguksFQI:/6TmQ0UcUjvbiTkC/VfGIJxh","tlshash":"7bc19e49ded28e84ec5b0a7488179562538d57f7c3392b3909adcd8b138567a3c70be8","first_seen":"2025-12-22T08:48:47.478917Z","last_seen":"2025-12-22T08:48:47.478917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/movieweb.png","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/movieweb.png HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 18096\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-46b0\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aofTBvm3bDXMtTZBff3rhN53c%2F0y0mNDM%2Fd%2BDpCn1Hb%2B76uwXpFlr5r8RMRC0wig8G%2BTlNJJ1IIDyGXS9dJyhgbKclhs9RAHlU1W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb4d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"fa7d4852fb8da113cdd556b88bcf5652","sha1":"c4ed1f0e12445e87776a04692a85cd9f5601338c","sha256":"afee32c0c98ce9954187322d106496f4eb3e219c71b5545fce45e4f810e0eacc","sha512":"ae47e90458cc685a048fe37bec2d245bac72bc6427b55f279af870b2a38a94c1746ecbb89d9881912d82959bf8e49e182356c008677bd5b6af7be0fd3c1bb337","ssdeep":"384:rhiXI3z08bM/oJ5Ou4qeB4sd1njKx6/1AurBjy0+KdspvKiW:rhii4GKa74qKpd1jpXljKDW","tlshash":"6482c08ee3415620a8ddc05a0a9c64078cabc4d4e2bcdb9f50ab209f6c751d70a5f79a","first_seen":"2025-12-22T08:48:47.4862Z","last_seen":"2025-12-22T08:48:47.4862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/textspy.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/textspy.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5472\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1560\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOelTOQrgS4FmQ2RikcTxJtR5pJroF0Xpb8a%2BZjw%2BiTCwwgyQlEBwZrEVwcAjtoUawo6J8iyPgG1vq3%2Fakh%2FbKsIoRMMKPgyMrkI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5cb4f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce2e7257bd3db856f455ea6ac2a44d0d","sha1":"d25750c7a16982050918581b6c22972bd66e289f","sha256":"1cc2879c7dd95fa364bb231392bc6a6763dbd9f896efebf8ad91eaa225deb0c0","sha512":"34ef759a5017c752b92c0aea37147cffc756e42e393bc54d3954bf698abc13907c85f464940af63cb21ec34f41ed8600d3b554d3d588938c2ddbfc0f494e673a","ssdeep":"96:d6Elbw+i6U/2L83tzFAnc1ialM2fbj76mZsBA7C6yi+QxWKinA/uI0l32V:dfw7/PAc8Ib9Z4i7K00lo","tlshash":"28b18d2eda580f60e44616fae6ba0799d318f813d01e5f1212d60225576f8db7c291c8","first_seen":"2025-12-22T08:48:47.494145Z","last_seen":"2025-12-22T08:48:47.494145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/undawn.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/undawn.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10770\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2a12\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BiP%2Bqdjbl9qSJUZEJK6n2mxhNRLxnaT9F881IgUi2isaqSk2G1HnCLsdy7869rh%2BfirQ7LAiMLo8GDL6fjPAcChyKtmbkKZHjMD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5cb52568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"7399a0a4d1efb970cff8d84c37ae6851","sha1":"aab89a6485b42dcbfc24ebe8fa80b0db7f8e5dd2","sha256":"3939e8a065aeca4a54583194f872242375da466e6cccb7b3ee7e1a73a06b0588","sha512":"ce9f8effc6966b37b56dedef78d3d193a812432999aae5900ea7ad88f04d5e4845b7bff48a2d7eec395026014137e855de61385aaccfd3edabbf69112c48a4a7","ssdeep":"192:sm9DFkuxaBW+x9dAGJSXY2ybu1av280a8Z+8+QsPQFd8IwbgjGzJW/sXUD0eKz:H+2GJE9SuO0p+KsPSd8IaAsXUD0eKz","tlshash":"2522bf795e435f1bcea9e074a9f269d54d053186d084c0f29a76447853f0cb98750f7f","first_seen":"2025-12-22T08:48:47.496806Z","last_seen":"2025-12-22T08:48:47.496806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/scarlet.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/scarlet.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2866\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-b32\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAiGU3Qv6rkqPTMV1g5A7mI75TnLVWXuhc7kQKOL6cJb6evlQRVTtgSHC9qPObYGPyzjH9lYaZCIaEdiRFS6SdDzk57svwW77MNy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b84568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c33bcde4160d44bc5409bc4a80adf369","sha1":"8f2d0994336abb7da93a7b7fc70fb02845c05a68","sha256":"83e9a226e6848d44bbb56d97de2c584105b384116584895f0e4ac9410badf7d9","sha512":"b20cb59d0b90797bd2f63f2ed96aec51f89e75d8913e9910b4a8eccc96317d4193ede3862303c4e95c8e069c56e94f8f5b034ce57e5ab6941fc0adf9115ff08e","ssdeep":"","tlshash":"3a512c22c32d5a5cc5254b3980646b82f37cf73cd55687398244565f8fedda40904bd7","first_seen":"2025-12-22T08:48:47.499478Z","last_seen":"2025-12-22T08:48:47.499478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/anyme.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/anyme.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2388\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-954\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjU0mw76zKeTSgHKjACw3Okxci0TLL4ckq047PfH7kT%2FLCU3U58bVo1NsBgQWXP0CtqMDHTYPiwYzGju6Kjxs4Ho%2FxHt92i39fXb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be72b8b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9777cf35896ae17e808befb9e8fee7c5","sha1":"c2cef948761039a8025abda46c474c12fa660b6f","sha256":"c08bd27dec8feb22dc89fbce680b04f58470323bf9e3c435228e04c9db9d4720","sha512":"6eb7d1218dd34639b81af0b66ab3c5f4e091973573abd7e9c07d3f39ab7725e1114dc2f5018321892a388b039f3815996460e352ab40c9f34682c507ccb74859","ssdeep":"","tlshash":"1b4119e5f7a64378d018d17630a6032ce34bae04238da94ac4868b75ae22a927559393","first_seen":"2025-12-22T08:48:47.509414Z","last_seen":"2025-12-22T08:48:47.509414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/baseball9.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/baseball9.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10052\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2744\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4d3ukAZuoJPog1FrO91CcICR4hrYOMC8%2BKC26nOXtC0Z53b3YvJmI4GYQ%2BPQO57ZwwjDWafJbUvBC4mxijLBVLPx5KTdJY5N%2F7C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b65568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"240d86b38226ec5e7cc5f54220848eae","sha1":"28f17aa04363d8360aed478e5505e7849c5583d0","sha256":"98ec01c5226c718f1c6e72725ab9721ed30c9e01ffa10b534b075519ac1ee441","sha512":"2bf1598a2a41407a4b77c1414f7a4561e310d4d8053ed4ef218699adf8e778831e708abf928674c8268c0390a555ad963e9c2766c8046957e26b45fde8d9dc5c","ssdeep":"192:Dfw8HaAh5gxBwqaZOiKdy9IdfgCsjMdC1wrAtWhXGRAMF8/e2PQ6aZqwSlf:Dfw6aA7cBwqaQir9ofgLMC1wEWh2Rs/X","tlshash":"a6228f3203adbb39e41e13f64661bb23f69faf01c9bfda4241808c5a4f5d1865d6cd98","first_seen":"2025-12-22T08:48:47.519345Z","last_seen":"2025-12-22T08:48:47.519345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carxdriftracing2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carxdriftracing2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9234\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2412\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxODXXIfqtDptYAzLOitV%2BBgHMWtULac3y53Z620p%2FWuTcODA%2FtBlnRdfDh%2F01zN8GwhH7%2BI5q%2B0Jsos5rGyGWhKWAOKDF2WScWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be76b95568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9234,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"395a841d80eb6f1b8b444735fc5a3f72","sha1":"3ceb99cf336d4fdcd9beba8b05d7fbb2cfffbc18","sha256":"ac02b85bf1bb3c5a4263c52d0b2a5fb8e0408d22d6569f577ae55a3da098c175","sha512":"f26dfe31fb31017bc0774ce630b9cbb9a58f7a731711d0381ddc1f83ae672955aa2b811b09f2615b9b97d09fd46aeafda6e29300e3912f6fd9fe3a62dd3faec2","ssdeep":"192:mfwLOQh4AfHf53z9frsc2xE8147azqwAMeWb1Z6Welao2fr0gmr:mfwqQhHPxD9T0CEzqDMvRZ6Wr7T0g+","tlshash":"6b129fbfc399674cc2212bbdae9807d268997c23f390546a12550b131e28e8765cfd3f","first_seen":"2025-12-22T08:48:47.52204Z","last_seen":"2025-12-22T08:48:47.52204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gachalife.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gachalife.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24198\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-5e86\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Klu3z157V%2FQxRGAeeauL3bRm39eOJMn9qYGjxrfKTSacAAvP8JaJOrbSnmfoSBPULGb7vUtrHmrC187MUWB7eOgr9nJH1ojGHmjM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7eba8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aaa8caa395f9829366b895708fee874e","sha1":"acccbd0005b2979d89c58aeb54afa060cc11da15","sha256":"4a73c69c1d4203b498a506c5371767081e7547c9cf024604bad15fd60e8b4308","sha512":"db3398ffcc8286dc6f988087f080283ff8102d8b9f5aa95c00ff6db1422bfd23540f1cd3b26159076abddc36d72efe6377998fd8bb86c718ffd08d7633228905","ssdeep":"384:2wgEdv27HS2aXzBUnYUvN/7f3NwY5DJ/F6he6LX0bu0weRGtmxa3cOVabH//:PgswTaVUF/7f2YhJ/FEevpRGu0cO0z","tlshash":"8db2e0c817a67839f103d3f895096966af4c0f769e7fd0433ce586b7db7886222a00a5","first_seen":"2025-12-22T08:48:47.525299Z","last_seen":"2025-12-22T08:48:47.525299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/arcues.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/arcues.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2904\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-b58\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQQJnx83BXKTWBfiOf3FcIq3teFIn3Wq2r23sT2bbwoVHf4HTp%2BK6evZ0RNsbV8YOma4jW4gzOq52Baopwt7vRbKvho0IM7j8v1K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be58b3d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"11ca554671dd2daf697699658ed407d6","sha1":"08a524d983e0de48bbe296ffe9cb28acfff7bd64","sha256":"60ad38603ce098166f7c2f2413d5ded4125bac3dc1846607316ba4d76ca94baa","sha512":"1aee79b6044400830713766967da2a1ed24458376b19dd25b7d1a49a03ba6b05f003184b4ed874d84b47c3e52c381610887fff5ce28ff9c854bf1f7a9d2aae5f","ssdeep":"","tlshash":"e051f93013815274c815533898220b7bf3f96c23d30b679689c4811a2a79e939eeb785","first_seen":"2025-12-22T08:48:47.52773Z","last_seen":"2025-12-22T08:48:47.52773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Exo+2:300,400,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Exo+2:300,400,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Dec 2025 08:48:14 GMT\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7364,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"19710206132561d9989377af244a002a","sha1":"aee63923cba9896530fe0a9130d7c004b4c0b13d","sha256":"0d99da773ce08b959a4f27ad4013d1c9266d7a641a34c6a8f6dee428458d3b74","sha512":"eb4cba1b89c148be4ed0719013442e770cd738226df949abfce41b3da6c025bf5dce9cb045b3597417a63ed138b739a07ea189e3a20163f30cbf5c33e528a072","ssdeep":"192:CpSRHHxxEipzRHucx5/p2RHLFxAtpQRHRnxmU:KUxl9Qs69","tlshash":"94e18ba0042bd400ab971dca63cf7e3a9d9e7115b480d57a5ffd08d8acdad62136871d","first_seen":"2025-10-21T22:58:53.951603Z","last_seen":"2025-12-23T13:37:36.76096Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":682,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":788},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/raftsurvival.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/raftsurvival.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6680\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1a18\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4mUhiO0k2CR7VFFoWjEh82d4oiTwLC%2FezJrmjm81CCTbXm7CsdhGu7VsR4VCsG3NrPw4WA7HNPsSFZqLRJwSkYqEyNLu134%2BOtL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eafe568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3367d061847c3a8a9907c1ae0dcb5f8e","sha1":"60c97bd03dc0bc99eb70a12fb31294ca2209f7f0","sha256":"5eb7cbe060a9cb85e71d31312e45621b51a346ebd0c9da37de3157763e2e53a4","sha512":"ea38b16c85507da7450740264fe5a0b39c0b5107005daaf9eac17e124e587e18d12b39296a6e64c3321e10c3b4677cc5732e97b5301ab19afbe9ca193cf735e6","ssdeep":"192:iXef8FzCVowKRwIRbmWiNYtVNl/Fd0pcPdqvSF4:iXmEe2wK2bYtlNdndRF4","tlshash":"18d1af8b8f683e64b49307bb527447467f5ecca046479b42e42b2911501ff9ffd1a6c2","first_seen":"2025-12-22T08:48:47.532436Z","last_seen":"2025-12-22T08:48:47.532436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/soulknight.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/soulknight.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4160\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1040\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMgySRQuueL2RozJmSAsvR8YZPk0I6lkJhtt8y%2FK5STaO5odFu0pmHR8t%2BWJXPbEMlvpl%2Fd6aOvtDCRM%2FoUkvs52eeyLHX5YFeGd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be40b08568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d73594087aa05c3c81b940b4db2c0326","sha1":"f6fc9eec1ae701119d333fb6adcf9758cb51ec0b","sha256":"d53efeddddfda29361f8b90c149d4c48f0b63d6b84612e876feaa349aa1b9390","sha512":"2c8d868ecd3f5a66d9fd888fbb2d6efedbdd54b44ddf6d687698317ddc925247016fbf23423327894f8ab059d3296fefaa3d89d5a36232c743290e8aecb197b9","ssdeep":"96:Kj6Elbw+ijdD2SD1rqeDDwdp8c67vaZ77lOpV9ERkSlSMQ:KjfwdD2ShrJDDe2ax78qx5Q","tlshash":"2f817e20f960737de65119f916922ba1e316065f9c0b8377f1c836154fab3c9a84e086","first_seen":"2025-12-22T08:48:47.534742Z","last_seen":"2025-12-22T08:48:47.534742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/googleopinionrewards.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/googleopinionrewards.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2790\r\nlast-modified: Wed, 15 Nov 2023 00:29:39 GMT\r\npriority: u=4,i=?0\r\netag: \"655410f3-ae6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFPClE9aM%2BES7yFR6Xm1gW1r1QhJTo6TcFQZF1GD8jzYh2QFx42c%2BOWJBrsku6%2B14396h0oYeGntCZoFkUeGS8GBT3SDrWvPIfDR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b0b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4eb1550b2ce10a70b7ee1cf78d334f2a","sha1":"973bc464d48265caa3f886de90dedd8805db290c","sha256":"06a3801111d45c734be272530ebe553cec4fbd02317b0679a156028e8930b65f","sha512":"ecaae8c87eba9011bb863ba6b25e5891369b94aa3386d2ddbb63c13ead690f90cdd704be69ad650298bb3298f81d56c0ac27c4bf7a12dcf7c401e72a3096bfa7","ssdeep":"","tlshash":"02514bcb5d17bc9aa0c96c3412041a041e644e8f57761e6b3a6d92e424ff24f3850c6f","first_seen":"2025-12-22T08:48:47.537139Z","last_seen":"2025-12-22T08:48:47.537139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/xbox360.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/xbox360.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8985\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2319\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AsN%2BOtnnnagESR0gq3%2BgbdZ0P%2Fl4ooFLBry3HKOiieGnaQIknIVbF6h1N03weX0In7qrBUd6nj%2BOAPjD6dyJZLudSh%2Bctd%2Fabac%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb4e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"e76f086890043217645d34a6f517a82a","sha1":"d4f602393a1242c9aec5348b6d759b4eb7c2ce5d","sha256":"909f5d103436893ad0184ffd8f719b8fd7d60ff7ff0fec709e669ca827ff1183","sha512":"ecfcda1baf88c4aaf9d68dd9ccfe6b6f622cf7275514ded0e1e5e72053d60b97ed9669db4508d3b30a74c077509934e8f02d8c9dfca6a749de675df2030c7683","ssdeep":"192:Am7aKOxuv+jeD8w0ZtvYkn+t3cm1q2833qTLxLOVLc9sCpB3kv9VjzDA:Am3Oxuv+je6nm3c53qTFYwHU9NzDA","tlshash":"4402aff144126311fba4ae3631f332a3c86e6e4172a1989d75f1840d322559cc53faf9","first_seen":"2025-12-22T08:48:47.539226Z","last_seen":"2025-12-22T08:48:47.539226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/icloud.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/icloud.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10048\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2740\"\r\nexpires: Tue, 22 Dec 2026 08:48:14 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkK%2BLPK0wKApMYddkxcwyBCw2CzUyZjdz5t9Ipv%2BicIz3cRg%2BsH6fyFKk3BYyIP9aM4dr%2BdY%2BaoOhMPc2JW49nzQo8r2KBkPOWce\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be67b6a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"c584a3c5dc9d96ffe3485ae7a0363cd5","sha1":"6bcbe56e02bceeea81b9db2309d6289d5d1bb198","sha256":"d0bd1ebccb4c53a27de46a45b65310474c731ec6327fb5faa3ef5d18b6aa2396","sha512":"a4fdbe2722eb225ab2ef2212b2876e54070a51b97c345544658cac7e6942e208dd25f13ef3da51dec530732f140b3203b4e2c5d96045f19ba776eb36652f0b36","ssdeep":"192:4YNMtKwhm7SMezS6qySiWdgf/cSSQ7i9eU9YmNVtiOx2:4YNg7MSMqSpySzecSQztQ","tlshash":"0f227e779fc1cec2e6f1e67424a1ff9736537e2eb2831ac468688b36388518817cd156","first_seen":"2025-12-22T08:48:47.541138Z","last_seen":"2025-12-22T08:48:47.541138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/minecraftlegends.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/minecraftlegends.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32540\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-7f1c\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUtvLtD3TaBKgcG36Y0oE2l2hCzj%2FcpZsY997IQrkkZ14vuYggxFE32cQ9H%2BC03GEfhWl0c1wZc7DGhVVDLE242dksPIC%2FYI4jK6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7bb9a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbff09ee7210611c1451a3b957514779","sha1":"9aafd92a6dac87fa109c71e6210e134af8b9bb9a","sha256":"392033a73e7dc15a73386e1c44e5e08d993cefab3031c2ee0278af5b9e5c1596","sha512":"37710d99ec8749bb3818a57d45c70fad3445d30351796d5e61587babd8b22fbc9f0479fb8750e58c2ebf3fc7ea31a8c802a8c03a41d7818d5a8183c4472217af","ssdeep":"768:O6vrGkHoyN0wgUZ7Ygc3dhRllvr4jCjs+1Sd3kP:jvQyqUZutHvxjswBP","tlshash":"a3e2f264637ab948d41a6674bedc9e41590e7c93142b1c850717ff8bde38c8985a10fb","first_seen":"2025-12-22T08:48:47.542987Z","last_seen":"2025-12-22T08:48:47.542987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/peacock.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/peacock.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2116\r\nlast-modified: Fri, 24 Nov 2023 00:46:38 GMT\r\npriority: u=4,i=?0\r\netag: \"655ff26e-844\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oqtd9EDP70Avo%2F6UKNK59BP9WB%2Fy2JY%2BDcceLkxTMbG2Dbf5QiWI7mYV%2FrUj47a%2F%2Bg2n7CrAAMhueenCGceqQa%2FjMrbb4AYEiHYB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eafc568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12b27cca9f7665d901eb6707f49d5d7e","sha1":"be169a0baee33ad130cf96704ab07599754156ac","sha256":"60f37a1c17315e1a9f17c04f18c302c1b35a0a8d39f71f765c1a22d6e3b3ab71","sha512":"03051543a3649a4d4e9612ae5f5574fb50e1bc9c2ad4c0cce20528c64c299887758c16d633b60a312e00d5f6b35f319f0d76f969c0c06697d1999aed364702d0","ssdeep":"","tlshash":"3c411a0b7401f931e8633e30f9b36e0c9211f9df006e879763656ab81c426a57bceb58","first_seen":"2025-12-22T08:48:47.544948Z","last_seen":"2025-12-22T08:48:47.544948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemonmasters.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemonmasters.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9786\r\nlast-modified: Thu, 31 Aug 2023 01:56:06 GMT\r\npriority: u=4,i=?0\r\netag: \"64eff336-263a\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxBkR7MOLAeIwlHhD7otZF%2BmBd45GkJzDqqXoeqly%2Ba16uiNpfVcspfgxVR4xYJi8YMFVvKxFxRdIpYllVgOZM3G7Av9CC7s%2FInw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b0f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a69a999c79b4de8a7da852fad3d40669","sha1":"e9801b4c4cd8a4ff93b6305a36ee78631ea8184d","sha256":"229cc7ac71cbff3b4dfffc4c0415d39d734abd461726cb22fbbbadd48426d40f","sha512":"d7f55c29cba34e66b5f726d5db2cde7c84e4c6a799ef3ce20108b3d46d59bbbf9ab5c1bc70f761cc404bbc2c1c5d34107b56ba00bb4b3394bdb074a87bcee436","ssdeep":"192:aH8YtpL4o77+bWAYexdxZQR4kER+DIv2004/qPr0UqgbQUXUS:ytj7QbxZ3kggIvsSqj0U5QUXV","tlshash":"7c12cf3808f703b762af94b3b12b0b10542009aa85f5e23739129dcb627f7f1b94d64e","first_seen":"2025-12-22T08:48:47.546443Z","last_seen":"2025-12-22T08:48:47.546443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/xboxbooter1.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/xboxbooter1.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6072\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-17b8\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG97iW1NAAV7NxomXC714vAS9V2BNe09%2BYny9t1eiuIRAH%2FQ3bGMggqQm0c9%2FbwKCCDRigyan9jXNC5X3J5EHIv7ti3GZwOtSKdo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b81568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6072,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07b6094212fe5c44eb65f117c1770aa9","sha1":"e0d9de886f5176166908ca5995aa6acb358ac26b","sha256":"022fe677116f080d1190a407d84e0fb86d3ca264f734a89525750530a33ac695","sha512":"fd039fce30531fd9027eec03485cac13b30d8f882a21a657eb347cc3a4bca2431aa2ec957086efd0c043e23afeb90f221b059a93184b53fa52df3d2262dbb9e5","ssdeep":"96:P6Elbw+iJsrAFZHBWubRqKA8xW0LotKzSZaFwDfFI46sHN5w9:PfwargvWubRqKh8tYM5DfFF6sHNa9","tlshash":"c6c17d132a315600dd1be57d31a4b685568ee029e58dcb7744c241d60824fffde5cf89","first_seen":"2025-12-22T08:48:47.548075Z","last_seen":"2025-12-22T08:48:47.548075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.5.0/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 08:48:15 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73852\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0UbOdS28J3xOFnzDI9XOEb7EJp%2FoenJmZdraw4qPs8rE1fSTT4edwbzH7uMEWo1KnE98eD4QmCpqU7SZIhidurhwcMIDxrxJcDoznvbMS55u\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"fb493903265cad425ccdf8e04fc2de61\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:38 GMT\r\nvary: Origin, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b1e5bee9aa95696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73852, version 1.0","md5":"fb493903265cad425ccdf8e04fc2de61","sha1":"fef2f08d60e907750df0bc41ce64a7139642ddf0","sha256":"7798165ee5a3c6809310d8261dcbe7c8d0c12d795b7b09a71af3eb86ec8f33f2","sha512":"321c63dc142426eee5e8c048e1d5a3e29fa1407f660f927889029e3a1db4e8b5d085ab7b757e5b9ee711646ff4adffc7730cd0cea16ed2d95e4be125a9d9b081","ssdeep":"1536:SuS+6SpmWvQxPsoy7ducmwmoyDU8ashRtSxxKEX/0KD:Zxc6asogducmG/OhRAr1P0KD","tlshash":"537302172360deb0fe84a66aed78df89911a5f07635ac039c4e3f4b598c401efae45e4","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-05-09T09:26:54.323421Z","times_seen":5689,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.5.0/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.5.0/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHpE3JHxMX%2BpK3cm8vTHitqEaOyXfiKbpqhLzM3sCvl8vUl9CzhdQzge%2BdMru6%2F52kFktod%2Feq14QvGlswSXX4U01PjfVZj0wcqmxmzg3PUp\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nage: 2467931\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Sep 2023 01:45:37 GMT\r\nvary: Origin, Accept-Encoding\r\netag: W/\"1cc6c92172d124fbd305ba3d8e263333\"\r\ncontent-encoding: br\r\ncf-ray: 9b1e5be35a155696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51215,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (51030)","md5":"1cc6c92172d124fbd305ba3d8e263333","sha1":"d24f4d0e56617d3663d5a929500f05a17d71246e","sha256":"9e4cac65c7a5ee0bd0743afefcabdd3e73854e1284ac9ac433813d6231f550f2","sha512":"41f0ddef89a583c69f812aa6dd5ab643ae5ef5bdf1321241e0667d39c1c3572d6167aa6a0493d65a732c2835ccecd20da0aa8900d34606e551229209e5da207c","ssdeep":"768:oQa31EzKOSd6lGUxPfXkQMT/mMcj3wbRQU9nQzh:oQrz706lGO/BMStsKU2l","tlshash":"71330cb8e54c41d9a732c04fff82b2b861b6f73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-06T02:02:09Z","last_seen":"2026-05-09T08:50:40.165055Z","times_seen":4856,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tindergold.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tindergold.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2162\r\nlast-modified: Thu, 15 Feb 2024 00:45:43 GMT\r\npriority: u=4,i=?0\r\netag: \"65cd5eb7-872\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rGWVAnypYO9UmtSfucQKILSCyYwRJqEO8YjbI6wf6Q41y%2B2W%2Ffks9mZ%2FPfdSb8Gv%2FMCN%2BenQp19ijBbLdAaruGYLUyOfOorpoDU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bade568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a24dddd6eb4bc6999a5a9fb20054eda","sha1":"69fcc3bbc8f10988f3f7eb55a912a1f209220099","sha256":"3865fdb5c0e89269460a42322b7afcec494b5e3bf27f10feee3822b734659d6d","sha512":"9c990571eabb7aefaabd1801e1a6def1f37c216b8c145aacdce82e3c7d99230653b8e2ec190c575eafe040c17cc6110922357c57dd7b50de17bdf8cfd2d64f9c","ssdeep":"","tlshash":"39411afb5b398369fa70b6703ab76a0f44c0980a84d96f49078bc28c4c54992679255a","first_seen":"2025-12-22T08:48:47.551165Z","last_seen":"2025-12-22T08:48:47.551165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/retromusic.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/retromusic.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5247\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-147f\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCIIHuRhI9BqAR0wX6LyJW818DUEFZ4HQ5xlrvwEp32ATR%2FUsSzvqSJQnDyVTjMpPOHw5MdwHdK1ZJapwWK1f77WrByMM1UiUYXl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baef568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"43e40309c2ebc80db2031cad323698bf","sha1":"db47166b69267b48002fde0f7feddf96ef740430","sha256":"5e715e0857917e1f71b6c2d4cd326dfb6fa525c74e22b6a1324a0f77c8cf9ddc","sha512":"5d4879882b5dd186b10ce84a3b0efab190635fe9f9b8773bfe4b040b6da3fc5aa3b2409a722b12e94d4311e3a9045afe4fcc262767f2494b8e46137bd3879b46","ssdeep":"96:c2PeX1LhdyhdsUcoSTPYhzSY/Vtp1QlExCkymIWwJuUpNZ7aei:7Q1Vkhdsfsl19tDhxr9wIQZmei","tlshash":"00b14b96f2724f13d2a7dcf62875952de36182c5e9c8a6f6ddbfc100a8608bb061d4c6","first_seen":"2025-12-22T08:48:47.55253Z","last_seen":"2025-12-22T08:48:47.55253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/amongus.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/amongus.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3198\r\nlast-modified: Wed, 07 Feb 2024 23:20:56 GMT\r\npriority: u=4,i=?0\r\netag: \"65c41058-c7e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgYTCy3zkiuoMb5UDEDmhbqLv%2Bwlr3SCIelcYJ%2Fzvld%2FScBE7RGZpRtgKvE5zpBbXwJjh1EuY%2F9NdsqpXUMcO6C4tUyC33ZtGo80\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b0e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a5793544bf69a20f1e666c9ac76b993","sha1":"b5da5bb042cf6fd5db555f8ec80bff3747db21e6","sha256":"63b671fff93f80504868a295c4dda5744a02449edcfe2fa33d4370ce7a030578","sha512":"f4d2fb8c615e88f4ee34edf081f226d3d7d15dd422c0fcf51b484a80e942f0b5163f007be8912283791f52ac4880beb92050e4150a900484f967a7d4057a51db","ssdeep":"","tlshash":"bb616d00ee12f811c8eafc33563c2e447c86d0651d27c22d14bfae9482d4bf60e99dca","first_seen":"2025-12-22T08:48:47.553881Z","last_seen":"2025-12-22T08:48:47.553881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/summondragons2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/summondragons2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8646\r\nlast-modified: Tue, 14 Nov 2023 00:34:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6552c08a-21c6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4qYRhQSy1ugQIHIVEtWke8JMjPtWOwFCb5LXeVkv1eEEkCT9mviSnopYuUCTgXUWjDkgKVN6OnshuSfZQOIvq6qLk4unzgxkdgF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be43b15568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8646,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96688d517ade7cd9448e84f89a41ae0f","sha1":"f8c6eb5e16bfcd4366e8071eef67bdf55b75f4ab","sha256":"fbf19ccd31761e7f7e5a4fdf324daea6a5b55c19ec93bcd1310ae5fec434ac5e","sha512":"4236502c9f46dc0230a61b5e3283f0887e063d9282af530d3a1da771ae29b1b4d1e443fbf018dacb68a8991181ca8044f13b098df81a6ac6eaca1faa954d4d3f","ssdeep":"192:m2W/bO4t4LPdTCcV7EhyPC/qaieqcLso749wf/M7Dk3dC9dMWN8SQ:v46LPRCcl9PC/qyx4wnM7DSC4ZF","tlshash":"c802ae9215c1c8d750ce0239cd11466e86771d644bc38a3ece5d027dec42aa6aaa68b8","first_seen":"2025-12-22T08:48:47.55528Z","last_seen":"2025-12-22T08:48:47.55528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tombofthemask.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tombofthemask.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3996\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f9c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ssK53ElUBW8kxsdYW%2FwkbCMQKakO%2Fvvwpn385MNDe0TiXlwnu1N4Vj2RjKUayFDbH4c6HST8Kj5lRaFXxp%2BA8bXcQs6EHuPbFzH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5ab47568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70a7dbd1992faf4041e88e03daebd684","sha1":"46b3ce7de333998ec408b5c82f9f5d665fdaa36a","sha256":"af4b61035207b27e8562c8a242278d64f31a8acefaaae43160f520dc7a4008ff","sha512":"d375ee889a19c67111394b5831123385df882457147b4f1465a56f0ae3ef78b5bf6a3a8bb3904f25f78f9c17bc9e596bb29fadcacdb70f3ee2c12522ae479d73","ssdeep":"","tlshash":"ac814cc8ea92c906fc886a7d7d867c9d76848c762a47a506ec236f9279cc05736851d0","first_seen":"2025-12-22T08:48:47.556572Z","last_seen":"2025-12-22T08:48:47.556572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/royal.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/royal.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6854\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1ac6\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4I180VT7vH9szyVJtN07wuU2JZdwqJQU0SsBKqTQFgTNUK0%2FZdvfUrZshlVYVWJIV5p9qKBTS%2FcuoKtydilqDVHtci4na5f4kyuq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5cb50568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"353f82e36cdac33d6d8655371da05a95","sha1":"1d26213f2789a69193e29d61000acbb5915d8ff5","sha256":"8aa829f9ec1a6c424c4622ae0969315b3869fd07e96f2bb5707c10cf8707e7f9","sha512":"ea44cfe793cd6aef29c6dcbede7309133ba7e82fd6cb80009e4b247b6802bba48bd669979817d5492078e36b4a40ba020fad0ac6619ddddaea57f578e61921c5","ssdeep":"192:EfwTngHgRETqelWsS1p9arDd1QiKy7GGp7fGZej/RpYSGpmf:EfwTnx2qelJS1La91jKy7r7fGZAJSSG8","tlshash":"9ce19e26638c423df543a9bfeaa56fc20203372f3a17737441b034392b544db951c6ad","first_seen":"2025-12-22T08:48:47.557855Z","last_seen":"2025-12-22T08:48:47.557855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/youtube.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/youtube.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1910\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-776\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pczWIxrETlwunYGF3nEc%2FxQ4b4%2B4CVos%2BndznDtQb7mfwlMwMHi0AcXqdlAmn54beotnh5prTBvLR2K6k7plTYTMSzeBeTwcqi11\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b68568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0867c938c2af049e025c450b033c453d","sha1":"37231ec31d90749adcb15d20bb15e0aecef866dc","sha256":"4da6a00a6d08458aa9398bf0ca2cabd05094d84a442daf8f5147f3194b9dedf9","sha512":"f180e5dc802be908a13098c3b20112a379503cf089468d16738811d13d03733645e35343364b205842deae84bb184a0f78a3fbf15304844fb5c707f1b6b31cf3","ssdeep":"","tlshash":"5341eb72633c935de6301374d9460b16db6ded1757272b3dd0f545118e186c584082df","first_seen":"2025-12-22T08:48:47.559255Z","last_seen":"2025-12-22T08:48:47.559255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dicedreams.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dicedreams.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5694\r\nlast-modified: Sun, 25 Feb 2024 22:13:34 GMT\r\npriority: u=4,i=?0\r\netag: \"65dbbb8e-163e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhPmnpebMS1l1j8D%2BTNHgIZOExdO0TTZS0GlpHLB%2FhXB7%2BMFhtGC1MA%2FFUCCtL4LEtMSP1mD5Nlqg5X%2BZGxDHZIUoB9yba7aMh8h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d9a726c1e700a890c3661797b3d0800","sha1":"335a7d4514a48ff8f9a8ddb2a7c88ca7f7812420","sha256":"df4355d20140c8ded47b665dab7052f5ccbde6e423cf2a06279c04c58ba404c0","sha512":"1e585314acaf486efa260c68cfb2ccff6a55353202b21ca13f9eea5ec509e7d6be3f0431cc205b181199543084c5d2f27543d628bc9e2520ac6634a15da5a3d4","ssdeep":"96:u8Qo/dYFmY2sL0yJLWhjMhqe1oP+CY8HZ92YxAlDQKC:n3/CkYTLr6hjMQpP+aZEAAdQKC","tlshash":"2ec19ec93a8f20d6d1b49b7d94093f8644b8ddfd720b4926c2955a0a1f9f302210abe4","first_seen":"2025-12-22T08:48:47.560436Z","last_seen":"2025-12-22T08:48:47.560436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mergedragons.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mergedragons.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5792\r\nlast-modified: Thu, 29 Feb 2024 01:29:05 GMT\r\npriority: u=4,i=?0\r\netag: \"65dfdde1-16a0\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSZaZuG2eNoXDnny28ylAh0%2F8%2FBPOAYb9q1UiixMazCCzI06iVd6rqWvg16Mb0dDk7fg%2F7dEjSi0Uf3qwAM0vd1o1YPk%2FomsQx7X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be44b19568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7257dd97e864734c541e47b8fea4f91f","sha1":"b8d08ad20bd1cd6b613244a6b796b808c5ff9c02","sha256":"b8b470644130abae3fddea5d6dea9e3b60243ed3bef2d9657140957de9e16dbe","sha512":"84aec8d0301bec8fd3a8e642dd57a6d8659449b22c6df4552263fb82ed81e42008e82144970674bb417c587e15daa21f196e10dd87ee53a8f278d9f9508865b0","ssdeep":"96:qAML1usSx8pgF3foI5pFuYYNP+FiYdoktHNrlGIGB040LqUS0/ZpAR:nML1usnpgfoI5QNP8doOH5oIB4VUS0/m","tlshash":"73c17d14d6f637a0f0524326d7d1ab1422cb4cc8673679ceb08913eaf64a5b06bd0cc9","first_seen":"2025-12-22T08:48:47.561807Z","last_seen":"2025-12-22T08:48:47.561807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/warcraftrumble.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/warcraftrumble.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7202\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1c22\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdarHjVerqHFHZOssM3aQSj%2B2tUiABSe%2FEvVXLwg2pgehD4zz7%2B4j%2F16ajkGwnJ0qNK%2FgTrbVzaMgb%2B3cx8PbC8fgE%2BkMCd7M%2BiM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be55b3a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6dd7c56ff6257d0e7dfc52ff4efcb83","sha1":"b3040dc5651557156019eee849f442cdb4cdd4a6","sha256":"68894d3a8edf57597d8c5fb63f82b877fa2f1c71f97f61df40f91e4418b12ad4","sha512":"f223541dc6f4b362fe193ef41e1de587a43f16162e20a5d18894b4c1e00c7636cd4fc0aeb8502a3f4d68aa824d50c28217864a86ae820fdfb48079a487e0d5fb","ssdeep":"192:yPppLICeALXU/LnwhncmooMS6UdPBWoIQS6hg9:4pptJqLdUzMQS6hq","tlshash":"6de18fdc0530e962ff45bcb3e629ebd6440cb19184cf1f0d1ccea158d5a5399a0a6df9","first_seen":"2025-12-22T08:48:47.563097Z","last_seen":"2025-12-22T08:48:47.563097Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/huntingsniper.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/huntingsniper.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5788\r\nlast-modified: Mon, 28 Aug 2023 23:25:53 GMT\r\npriority: u=4,i=?0\r\netag: \"64ed2d01-169c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWe6TCGbnAmfWwtLTm3yLa3n8c4%2F9fx2Ng1vT%2BoCgPvFu4MgRwOOGujKecPe6GTY9yH0AXFA%2B5q7K5bLG2wQ1yunGs2zv%2Fs9I1wp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be54b36568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"356efe05092a8f6d739be979a04198cb","sha1":"5223719a9f94c1d844602b83238624f8192490ce","sha256":"f43319377db4244e315535899f2ad4ddb941fe7604605c7ed10a35bda476ec69","sha512":"009ae983fc9b7ad6b50fccf7a058c180d9f2210571df54a987f0e5ff3c7ca199587fd56e6dcbc4ee407206191b03db78903d758f77b6b8d8d5dfe0d8d6f2f445","ssdeep":"96:OaZixO/Vo6muobR5ugnmK+VDwQOfeTl9zqkys6beM4fGCCfbBTjWSV:6OwhR53mKHCl9zKiMQGCChWSV","tlshash":"3bc18e9315935583507978f68cf33b367a1bfdf8ec03684d5750a97a4d332242a69a83","first_seen":"2025-12-22T08:48:47.564406Z","last_seen":"2025-12-22T08:48:47.564406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tangolive.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tangolive.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3018\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-bca\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81C8UsMyXJRDJzdwRKpTQ8UvlOf9Gs0wcp3x7H4V%2FgBN0RuDmERX9LTF4CPwiieSiQ4jV5URK90EuDaLSHMnV5blHQSWJpHpqlfS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be80bac568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6904b4488f2212f96313cbcca588b1f4","sha1":"ea61b764f41b2c6eade75936007ce5d7003fb980","sha256":"8a3fac61d6883c7e8d21c1d6025303cfe809dba5c1d0170ccfd97986b0ff3ad7","sha512":"a27858c9810da27d47a26155dcd9fbf22933b5bc368f9abb576c14f3371694bc0787502073eeb02ffd545faf58e41f1e5f32beeaf02fb49f68f8ae4fa83c73ae","ssdeep":"","tlshash":"cb513b460321a6edfc803f798cb2076fbf34220f0b0e2978468b4b920f14482557e3aa","first_seen":"2025-12-22T08:48:47.565652Z","last_seen":"2025-12-22T08:48:47.565652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/minisoccerstar.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/minisoccerstar.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13584\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-3510\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4Ua%2Bkyxwl%2BNTtJJ2%2BjkAmNp3Pc1cPlIq0DovcXWYueQgbZYGl%2BKQyrIcR0JMY2DPaje5pZ7GXgW2oW8bP920slYcEz4PbH8fFyd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be81bb1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f208d047a16cb918b13e112b87f9cc5","sha1":"339e01a491192ff917f9224311b79eba758e0bca","sha256":"fdd8156193681221432f3517bb5408443e2de3d8b13814dfa2d236c776fac56c","sha512":"aa0e2621e1228ba8fe1f430382cb72f5e635d7a499e99e4f5dde01ebf5e3c9a7c3ee9f4e0aa5a50500ff36be48a92bcd3b8018933ae6b65ba289140fe002f4c5","ssdeep":"384:nw02xMY/vo0lryHjzCmz4avGqy6W5JT6qb1YNkBpkKo:w02yLoxmzHGnnhmn","tlshash":"ad52c00ee7e15106cc256d7db0e46500e1af44938b8cba948dd5f6febda0802b79939f","first_seen":"2025-12-22T08:48:47.56678Z","last_seen":"2025-12-22T08:48:47.56678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mightydoom.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mightydoom.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12894\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-325e\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLaNzgS%2FezWYsSGvXCss2Ys%2BrDpVCLICDAv%2BTc7Ev3WPmm2Ihg1H4hVIt%2B%2BTs%2B5GcCd1FNB2fZZXsMEPT5SVnIQVRa1gBpLeMgBq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7eba9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ca8fe0b620f9f484401441ef87e5c8b","sha1":"f4bc964fb64ed5d1d7407f4d8a426f720b8caecc","sha256":"d4dc66128e4a936c4ce4c9296708abd50099c3916f5c826760a48ef41fed5427","sha512":"e009c339a55890d4e57df36ae2b510a117237005a9e0cda8cc29ded715b21a464d2cd8c409c2977a3a9cfe991eb5086947e8fd066922a832bea1587343647204","ssdeep":"192:UfwR84E2sGiMb4zS5oFc5DF4yghl0JYhMOhgzrKhxruF7TQWHtJsydyC0vwCL:UfwKGbZoFcBtghCsMORxruJQWvsQg","tlshash":"a142c0a55328a69df2ed20b110369705b34a9f0f2f287fb3904451b50be3d95a4f277a","first_seen":"2025-12-22T08:48:47.567982Z","last_seen":"2025-12-22T08:48:47.567982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/goodnovel.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/goodnovel.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1626\r\nlast-modified: Tue, 24 Oct 2023 04:04:24 GMT\r\npriority: u=4,i=?0\r\netag: \"65374248-65a\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lD9AUVZimrXG1574inslX%2B1gTyZR27Nmu1lSsclf4yy3D9ABVUtZjRTL3V5BP%2Felr3VghpLOzRcmfpa2m%2BbjLW0iQMvwyjr%2FzOsf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"399966d1b368939180121e7ab89bb6b8","sha1":"6d9ea9a5954b199e47290e2a2c87a10924b80c1f","sha256":"12d08ad853a323d3d1e1ee9e65f9700462344f9dc3e440e4821af876e05e8dff","sha512":"8375d4af2f5a505e17bf53673bf16632c0a6b6718b89f50df3aacf0dafabd0a7236350af6e6447a1b2ba27ed1e83f920a9697dc6c7aaea1efd96ba780320822b","ssdeep":"","tlshash":"32315a94082e0e9fcae9b03f8a617ec820c0664712a4e44a338b2c707a8e6893c01e81","first_seen":"2025-12-22T08:48:47.569209Z","last_seen":"2025-12-22T08:48:47.569209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/di.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/di.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7184\r\nlast-modified: Wed, 06 Sep 2023 00:51:53 GMT\r\npriority: u=4,i=?0\r\netag: \"64f7cd29-1c10\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sNBIyahpOabE4aJg3ptetDqpTIhdZeHojX4xhhYSnP1TkT4HA6Cmukt8HMr9ZLcCqhHiQENq4oYhixekl7NzM5opVRewQ2BwnQZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baea568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7be6f3f27f8ae96709c78872414f9d2","sha1":"178600ae1b0ec95eb06724977951d6e1c4341f5d","sha256":"2318e6561b09403701c9f4608a95b4b04ebdf2553509b3df7847e680da0affec","sha512":"df8dfe74029c618676972ecf873c9d550730a1aaf4660d46a50fe06590f3855b2b075f36d84439c4c048910e2d3ca5efef3287a2a6bc5a2632a2b358de0ee2c5","ssdeep":"192:vBUMsGeO8nK9idmF/b6bxaLSPLMAUGpy9i44aj:ZUMeOP9iib61amgAUGpe4k","tlshash":"c0e19e01d7063c117a71edb6f0ba7a10c1e50fe3d786cabb90ad2c95aac420d58f42d7","first_seen":"2025-12-22T08:48:47.570206Z","last_seen":"2025-12-22T08:48:47.570206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dls23.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dls23.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12893\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-325d\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bftWzs9DHXHPAiyHVgovxmbiVb26SC%2FJf3u%2BaWTwwaBld3vcg%2F3i6J2H%2FDZJ%2BjFMZfaCs4oeA7fPhflG0RC5DhdupItaa5FJy8qx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be59b40568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12893,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"163dcb0a34dd7b894d418fcc45efe69e","sha1":"bf385538255cae7b6b48d159c514b44f5e9ba8e3","sha256":"5b0dd2c6aca86275a3f8fb6664cf2d2a2b35d4bcddf4c0e930c689811b783010","sha512":"b934443d9bfb4c159201db600be2732e21361c365084fc10a2b163c52f24b24d0982ed6be185aed4a5c2b5dce242eea715204aa47d9556f01aa0f96f5a3012f1","ssdeep":"192:vqmDxuqx2E3ocryGBcQsDLPVw37dPBNrp3m1Q1KQ9+OqzVn3zHBk/vTgI:tQq4EnkTa7d1mVLBnI","tlshash":"8642af26e72473d79c90ed903cf0173788ac3867e3c9f1993e70011925a15658d56eeb","first_seen":"2025-12-22T08:48:47.571391Z","last_seen":"2025-12-22T08:48:47.571391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dblegendsnew.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dblegendsnew.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10172\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-27bc\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Tn0340XM0dMwI25x8uB6QjlKGAdaqmzXHuBXRMRup7q%2B19OC%2B5K%2Frx2iQgi2AT0kKYnsqfhIUnA3iT0O8SL%2BGTcECyO9%2B9rMycY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5ab45568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d2f60dfbff66ad567ec564a7f05b2f7","sha1":"e1e2cde9938a1e9a280c678cf154c552759c6861","sha256":"c50bb1661a8bf416ebc703440174a51828c03f8f256cffc49c4c00fb00b4a8ea","sha512":"061761429a2fd778cfd57e185f43356f78c15ec32231352ee0872e9b240161fca719654b8fda62e26dd838d3ea1b6bb1b23b8c41dee6ece056cb31fb6ec30467","ssdeep":"192:laxIhOzWiqMWBsD7m66LOehKd8jvnV5mAvDiFWgj4c+//uljUuCDZtm+b:laeh8CaD7R66Kq8L3vD2WgjWuljfCDL","tlshash":"5e22cf588da1f55a4defaf13f88c2c170058ed9183ae8949218307bb8214b695bbd2ac","first_seen":"2025-12-22T08:48:47.572597Z","last_seen":"2025-12-22T08:48:47.572597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/naruto.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/naruto.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6502\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1966\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJ42zgLd%2BaTMEn7XmdRpVjQ1RCuhaoGg8lCCNfj6zCrf%2Fq7UH8rD1bH0oJcOpoCY6ocLtiI3heUWXY1I%2B2u6adOpq5ty12EbORCF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5cb51568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4272963de7ad374360c3121f7ba932a3","sha1":"f4a2bb2286175d5c02338493bb4412b873d2f770","sha256":"c5b893ab57c78c6bf83120e49fddde5d2dc07ce223c8f3c2407925185355d59b","sha512":"ed1fa2bdd7d897e3c3703356c48fc6579942f3b4cb2f300b5f7bcbfad2a8d9ffc05f6f7c628abdead816612e70d9a351910219b000ae39c1bc93231857e15090","ssdeep":"96:RwzTNq+OVKgru9vtmLlfpP9rcMtqc67N4/Edo4GC428rRVWSY3+5/iQ5QDc:RAw7S8Bfhtve7NddHcRESxNivc","tlshash":"c8d19ed46b213cb25514f879ba252de4345f22a8ef3763f4aa4f0020805d169249d58c","first_seen":"2025-12-22T08:48:47.573814Z","last_seen":"2025-12-22T08:48:47.573814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/notesnew.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/notesnew.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2580\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-a14\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERoL6NnOtSxKcNGed%2Fs4iRoXhvC9wYWAwMTyxZUtS%2FW6yc7BDa6HCeU288iQIbZIkOUI6Rcw%2FSsiGxsqlLb21CQNk6jW87BvMQ%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7bb9c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdc039237d19d31f1328c01c2061cdf9","sha1":"3a207372723e97388eef2ae937c2cc9fe99ed40b","sha256":"91080d5206dffe7dfdae369ab57108db67d33e0756857a0a97e6fb98db6d069d","sha512":"ea454b26dbbcc56e359ece7592dba034edc75d35ce99a7dfe1decb0d71b60e0661d254938e6db69c348150b4d8bd153a3a95c1323aac70c0b958fc9b86c9bc2c","ssdeep":"","tlshash":"12510a30333743a5e691b335854a12435b31bd0686813c9b87c383db5b1416cabbf2d2","first_seen":"2025-12-22T08:48:47.574941Z","last_seen":"2025-12-22T08:48:47.574941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mysinging.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mysinging.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11610\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2d5a\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4JDYH9fm8yuu4rbnlUHkYO4EyVcIKVtuCftHtdmRNMY19QzFeTx4B6V0K6Sp6lS2peSBNEyHs8gtZJp25AfqHQN3YhNvjcV9MkD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7bb9b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"323eea9a1780d5c8f6ea54f9b1e650bd","sha1":"b293f4621b21741899d12ba6ad8c978312e4a95c","sha256":"04ec5fe64344543c46c34f948456bc69c4dbd3579b96624e659de3f7b655b453","sha512":"f86ff0bdf2650ca942aafe564a68b51ef273e8210da5cd31c11e24084c7b004be3b96a4ba4d302e04087b5173e8f307a1db5f9f9ee64ddb93d584f107f416c2f","ssdeep":"192:bfwxUOjYY0q9kPaFw0IyEdbz/8HUj0+Xtx5WMixx3l1iqR6SlVwu7M:bfwxljYY0qlR/Kz3jBXlWMixBl1iq3li","tlshash":"f632cf3c232cefb5d21a963f167a4b73c4d66492560563d2f0b41302ae306dcf8e1b82","first_seen":"2025-12-22T08:48:47.576044Z","last_seen":"2025-12-22T08:48:47.576044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/fishingclash.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/fishingclash.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37302\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-91b6\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wVEzJbXHGH%2Bp5DuSdu98uiveL1u%2FbG2OlvxvVoe4szDPtmtGJbEcIK7OAP%2FaVIQO8S%2BKJEuZsPDJ%2BrIJWK9V67HyG5mnpL%2Bxvfm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be80bad568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37302,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66e212066c33535c9f0395286fa6082c","sha1":"d9da1ea6923bcdc9e1e226d016f46a2eaf274b8f","sha256":"b349aeffd5e03e48c996059a7d0c8e422ee1c87f782b00e4438921787c2d9fab","sha512":"9825d964ee29545feda5fa75e54bcb005792bc6c9c17d32c723b2c1cc1614f22f1fde52269fe4590dd6951b9eefcd2200fda8180b40f36e4c976333435f24334","ssdeep":"768:eywrMnwSPhbKKH6RN9b8TexetsoQ/7rl6K4dJcc+KtMz1fXJu+:nwgnFKnGs7Xbdz","tlshash":"95f2f12546588a92cc52ecb837e49f9171edf723028db046c7d8acba9392d29bf045dd","first_seen":"2025-12-22T08:48:47.577256Z","last_seen":"2025-12-22T08:48:47.577256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/plantvszombies2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/plantvszombies2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8734\r\nlast-modified: Wed, 22 Nov 2023 00:26:19 GMT\r\npriority: u=4,i=?0\r\netag: \"655d4aab-221e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIdDEiwyzI6TB9FGACoHrU%2BoDrIwYzf0Y0vSlTSg%2Fvxx%2FOHjVA%2F1ua%2BEujcOu8vcj9VMa8v5kSfSUuIGlAK8H869j%2BgKSsWNzdFO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baed568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"788dc3d52ab1650c84938659f8724cc4","sha1":"2978704e22e569321396f96d84c9ce62c3cbb171","sha256":"0e67a35d4e1a199d7152a731a945e1c09c2d93bc444026debb1ee6788a951c77","sha512":"805c3e0aec17789d1398009ba32e5d9cf3900ca85853fe98e040ba6f77ebefb5c2729076a7b8cb0de28689c7e650ee7b27e4f1ae65b402736ad09f836161682b","ssdeep":"192:VVa1/yyncVpttV8zqsPIbLMa+BLM7zf4nEvO4bGMfbgazY8ztIBUn71FMcX:VVsnstmWAa+BLM7T84tLfbga0E7dX","tlshash":"4e02b0f343e3f2a4f9dc4c697176ae331c42b1abac4496de500790fab20619f5746978","first_seen":"2025-12-22T08:48:47.578346Z","last_seen":"2025-12-22T08:48:47.578346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/chromevalleycustoms.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/chromevalleycustoms.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8440\r\nlast-modified: Thu, 19 Oct 2023 22:10:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6531a968-20f8\"\r\nexpires: Mon, 07 Dec 2026 20:12:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 1254956\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CKxQAC2xiG%2B0%2BmaIwOwZ3X7X93LF%2FRQEB4ljrU0AZRaGtKup1AnPLJTBN3lpk5sPCySw1bnBu43vaWTlBZ0RFpSUAVp8eVwTpbB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3caf4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8440,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"727474c147be9f9ed07c76e6d0214e0d","sha1":"cd12affc96045fe44027d3f06e06155f5a5d8e00","sha256":"d8f8613f1aba0b180658747d08836298100b0babbb814be39c9b0e3112af3264","sha512":"2796cb089463f01aa685bd99e5f4e26bf7bf46ec3ece2c4d83e42921f79f4e2a7d6848cedcfe28a370ad282c953dee3d30b9a380f17be7244653a268fbc238e8","ssdeep":"192:mOdHQH6Z+Iyv1J8pOdb3E+687omyqTZuhvEpHX2l92Xr:mOdHWkOdjp6dgVuhvEBml+r","tlshash":"1402ae8fa31cb9158d670972275acb2a2012fba65d9fe644bf83c3610ccc148773b296","first_seen":"2025-12-22T08:48:47.579379Z","last_seen":"2025-12-22T08:48:47.579379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/magicalgirl.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/magicalgirl.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8576\r\nlast-modified: Sun, 17 Sep 2023 23:27:35 GMT\r\npriority: u=4,i=?0\r\netag: \"65078b67-2180\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqBD7sraaeLL9tT4LvPFfHULUTcRKXEK37SQ9%2B8hHWAInOyh7wNA%2Fqttp%2BbH5N3M39Pt9FNbiG725SqbPwEH9QKGQflqOA5s2i%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb4a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a3ea37c7d846c22ffc7a3c44728696e","sha1":"8cc1d14c0c578836b4d737cd9fe448cbeaae427d","sha256":"f68bc7cae1767eae6db8a5ccb70c9a2549cbd7976152eeafc672611e998e1473","sha512":"755bc0640dbd640124ab80a241207d03d76a12cd15b4222ae2336ff797241a191343327aaa1e98cb5b6519099a2e0d47d8ae87aba45df4f71327d2a34670e5f6","ssdeep":"192:NgG6bQeoa8b50ANEnS6gISjW+Ry97+n/7JJrAj92:yG6vonN6gISjWr96/7JJMj92","tlshash":"5e02bf814ca29faed85c19b7c8c05dad0dc2c9a576990fc47f28569ca8b543c6086277","first_seen":"2025-12-22T08:48:47.580626Z","last_seen":"2025-12-22T08:48:47.580626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/ifake.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/ifake.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2516\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-9d4\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkGBagiXsYzaZstnx%2BUa%2F7lZtUY4K2dPpKC5B9eyJFjjwt7Xqtu9LLaPFzY%2FaDeRQ0mgGFhaw0%2B49f0T2xc0ne66OrUIJQe%2BTRJ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be62b5c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34d4c9d218dd46c5b601153343b350d0","sha1":"c9494e695b78d32db8874e5230d684854fa16f58","sha256":"e721f3dc5f123e89d6d0e100fb0c689fc882b7f48b48c4157f004000614bc018","sha512":"47cc44f4e7efe1fbd59a39d70583ba3966032834070f0541da695386ae91c83ba2876929c3ae69646d9980dabb5628db871c4b0d2926d55d5fa4034f1e5e5304","ssdeep":"","tlshash":"6c514d95fade1b9ecec0777f14b82f41aa3e4469610d01620154ca87327275513cc34f","first_seen":"2025-12-22T08:48:47.582266Z","last_seen":"2025-12-22T08:48:47.582266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/bingoblitz.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/bingoblitz.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9698\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-25e2\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wz2DAkD1fb%2FeuTjfqn9dU7yEAm0sbRAqGJG4aPB97TJN%2FFIGcFuQqzE%2FHxY4VdvQKSnY9S8iHq572%2FEaKrWMCGDzNBr00KoMIUQU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be75b92568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e22e46bdcb0ef3d0c35359be5627610","sha1":"0fe01b2b1ff5c94aa99af8724b492103c6d7b1b0","sha256":"697c878d169b83fc37597b56c1afe80d952b75389581492ed292dc2163042334","sha512":"be307b6cc12833dd1a90ec8a0a7dfb9b5ef4dce3266522c51bd6a776767e01e5a7a05a80335337ed97ac659c9e9f379be2f1fe8edb134ca93fd22d535f312c06","ssdeep":"192:rfw7k+9Vk87ZDb3HMG8Bd7zuqNQKdxb+xFVXp7s2sCyjDd9Dxz94fHUY:rfw41gHMGeHJDxbsFdfyjDHDxx4fHV","tlshash":"2d12bf3487e913d8c5839437fc8a4ae6d377219a297831f6d1c116462f2cd82ad9fdca","first_seen":"2025-12-22T08:48:47.583588Z","last_seen":"2025-12-22T08:48:47.583588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/replika.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/replika.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3990\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f96\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7t4kvvC08oOOpNFlk3lpIA%2Frh8LoJy0ESy8TQYJ8hAZi8%2FGKxkNHWtEWhaA0jhKWL%2FIhNefLvi6lBukAz%2FbOTeR5vs2gFQ4ALQN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7dba7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e10f190d97bc95a1335a196b64630c0","sha1":"365b2c0385788b97a3b35b572d66730081895f7d","sha256":"47e39bdc19b5c2c9d384f8f8064d367f95b1531f568bd9181ef46ea1e276b2db","sha512":"79a19857517168ee2b018cd085e6c65d5e8b301677d8b9694721fdfa3acef6dc37bdd6ed328fb65ebab60f15d78969dc8b67f5bbb947672caaaffa7c6a0db3ac","ssdeep":"","tlshash":"0e816c8893f0ab14e4eb27305e4bcbfad73c2c305fca014940d99231845eb48ea844af","first_seen":"2025-12-22T08:48:47.585082Z","last_seen":"2025-12-22T08:48:47.585082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/metatrader4.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/metatrader4.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6524\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-197c\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGjs5VgIFCFhCJDshBV34wQ1H5ruAVHwthBNiKoq8dA3rr0PCAv8sN3YVwo%2BAtIWT6Oep4fzYU%2BTNKbsJ%2F7B0ODzVEEGRzV8oBtY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be81bb3568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6176ff570c210019e33f3e537b0cd913","sha1":"310f8ff6d0b794ae8a14e2d18be42448eb4f4288","sha256":"0d2df46bce9827e677ed39b2577fe2bf42501f23da5ee5829791ee965ac00cd7","sha512":"b509f438c330bc9c7d4a6fcc647192f3d286211219547f9d42a14c5227e539bb52f0ad96d70f325d65cae8779a5dd2815fd2284ebf59974527527f80a837a31f","ssdeep":"96:V6Elbw+iXq69ldlnswseduBG8Bfl0prUXLpqXAmo6/SewxSuvTZl/mixAnOdl:VfwDr9nB9sedmZv0t1JoGmRgnE","tlshash":"8bd19e306b21ef00fb017ff122d107890faa4e180311828aa0a7b4874e9997a2df57dd","first_seen":"2025-12-22T08:48:47.586086Z","last_seen":"2025-12-22T08:48:47.586086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tiktokcoins.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tiktokcoins.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3900\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f3c\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpnPzHZGVGBNHe3%2FTXxV%2FonJA%2BGJbnCwNKH0IfvfrwigF%2F5agzAjCbRh0k4lsOF9%2FJ876H9fz4gSu1w%2BdJSP9q0haoNoIU%2BGqvqF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be37ad4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3eae685793835007cd5d36fb9b65033a","sha1":"e3720589ea9414194300017032cb1a7d7210c9e8","sha256":"fef176e4d747967fac26cbc571ea5ff8475a321cc46d4994e34f19c3fdf03c91","sha512":"2f95cf88ee031f7be928d9004a9cef679c8d175cf9aabcd36ff29c3161285b6cdf0a2b6b66e77952a7957ef712e89a251e0696184333b75bf96bfb1736e0e437","ssdeep":"","tlshash":"b3815d2713e162e4d8317e3875347728bbceb646f5b8a60bf582156c34a12f15f4ee41","first_seen":"2025-12-22T08:48:47.587372Z","last_seen":"2025-12-22T08:48:47.587372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/csr2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/csr2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6590\r\nlast-modified: Sun, 03 Mar 2024 23:02:33 GMT\r\npriority: u=4,i=?0\r\netag: \"65e50189-19be\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eUmV83tr6baPTBfRQ%2FT7fZZZ%2BZAqeGCO84dwK%2Bdl6VMAu8qZ2cPqtIc35wBsAsZhf4UgD44EJ%2BCrr8Z18xuDjfM2pBNOn%2F7GuaB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be39add568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f2a078d8f35236d93bb4c36fa6831613","sha1":"8b21d0b1ada8179259d7639840a979846ac32427","sha256":"b176d8e42f3d318fca64685108ad4ce1085a217797cc53cbb2630cd581561816","sha512":"dd0a3a111f4593bcd1bcafc72b965662428f503628972ac325dbbaf6cd09393ae4b2bc0abd189d664bac7bf2a332107e8772bc5abb707c827b883671d9cb0e94","ssdeep":"192:6YhncdjqEdMEFWk+VGOJouEU7PAMYnX2b+qqLO4:6YKVqEWE4cC7EUzmJx","tlshash":"1dd1afca0b47b753ac7578f4cbe60057ac202106de8a3ab98e5f9dd1ac61791f482570","first_seen":"2025-12-22T08:48:47.588449Z","last_seen":"2025-12-22T08:48:47.588449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/heiroflight.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/heiroflight.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8396\r\nlast-modified: Sun, 17 Sep 2023 23:27:31 GMT\r\npriority: u=4,i=?0\r\netag: \"65078b63-20cc\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=588IWrgvfEkTa0EurIYMLZ2Jk1YJobVyG4DrroPx9w5WiE1I6JJc3tL5eR%2BuC1hmXApJ9XKqIIllxVrP5ZxKEbMiWFlNHOgKAYxJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb49568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be25f07b93bf4a4fe58b437a8a0293aa","sha1":"0bd97a1719716fa9de9bb841dddaad4dc00bf8f4","sha256":"76d969d0277d362582c8d19b24b23380666500647a73f53116981a99d45d46c8","sha512":"aa292b39049c9fd497a27963ba515131f386badfd7ca37e539efebbf48e9dcf533bb66c95a3963d76aedad178121aa2c887a460d8c18ca845b3c91a01263fe74","ssdeep":"192:NFHmekHdZOeA1zUVNHh1WWOvcQC59DVBKTnvZ0QuFXV7wAB3YQ1jzXcH:Ns98eqzUb25EQK8nvaQ2XVsAB3p1nO","tlshash":"5c02ae498725300ae50e28fb2caa073312a487e41547ce50dfdb28a269bd899e3f5798","first_seen":"2025-12-22T08:48:47.589686Z","last_seen":"2025-12-22T08:48:47.589686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nolimit2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nolimit2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7288\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1c78\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTtYp5a1Xt74C9ba9yXlZ2zs0vA5x22J29NA8dWLNEPFrzgnhyQR%2BpJl4fb1Qkm4WNG0tE4gQg3yNzbN%2B1kfHLWDqw7SAfNGuLYI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6ab70568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c3ad40a34e50b0aac2e22c18beb1089","sha1":"bd0162f3c06c1e2dbe04891d722c345324a041c6","sha256":"39722b5249fbd4fe99ad6f81fa3d21de4a043036407e5a44329cf982e1886b57","sha512":"f9e0301988d197835aa54806f6bd7325ca17f0298beb7425faedb115e386da28d9af99d05674ed4b98759a867f7741653abc6baf0e3b3d3af3c048f4223da770","ssdeep":"192:IfweTkyITdPhUXn9CmsqQqj+pL7e+tk+v:IfwOkyITdZU39CmsVbgD+v","tlshash":"05e18d60abf04468c82852788012374af60e7fa9ecede7358bc6821ccb4b6c762d05d6","first_seen":"2025-12-22T08:48:47.591034Z","last_seen":"2025-12-22T08:48:47.591034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/monopolygo.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/monopolygo.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6134\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-17f6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5K%2FurOt7AEngmzGJruhu4kmotBHfhctyU7MWISEpEtAbbMo2JJc7e5OwHbxwdPAtaF89xkkQXIkXmxWglTXPWo93qQszqvO9bUmB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6eb7d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6134,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a71c6cb78d50be2a349e12f07f273b7","sha1":"6a20a516c4b2edc2d2ff897afd9a3ad9dcbfe326","sha256":"801cac21c9bb201ece98da065364e89ab7879f0348fd6ac4c49a3371b66981cb","sha512":"1afcb43459f95d650fdf8826a44c1de8add33debdd7b73edf6ed53e2b18e5a333a89a6781dba55fdc5957b5512a7c3e7e8549954dbe7c0510a460bcc85f165d2","ssdeep":"96:d6Elbw+iAu5549W6tPuuVPQ38BIOnugdTPANIOickOqwY31pkgzQe8xoENctuZsF:dfwC9lpQ1ebdTYrqwYFnFSBSGzm","tlshash":"31c18e372bd9a744f60d4f353a688f84b53df4afe1cb66a187538f3b5f0554a5085202","first_seen":"2025-10-23T02:54:45.118421Z","last_seen":"2025-12-22T08:48:47.592345Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/scala.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/scala.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1814\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-716\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mKahC9CQNmZepXvyKtjAJxofY3B4ynSAvyToDaSywNqjJfeCthbrkJZEbQGfqT44h6y0rGpK%2Fi%2FQb4aKxwxha6uBCW7vYybi%2FLd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be73b8d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f1e722f95f795beadc27bebc825e525b","sha1":"6b3d2861a3cd6498b45c39790cbd7b9767e390f0","sha256":"8b92f41827740b65f572cd7e94ccb59ce0072f8f51d8810e30366884ede120c4","sha512":"d8ccc8ac99e6306059a3f7d08600994e1c079a55602173265ec5ec0274eec33f70237ad37b1af1cb6ce4191102a01370c2c1e0fe73e84c60db6d8cbb206cff19","ssdeep":"","tlshash":"523118b293ac07acd0d24e3858a113c6c3746a199f23da5b84868334b7273d93c8c988","first_seen":"2025-12-22T08:48:47.59298Z","last_seen":"2025-12-22T08:48:47.59298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Dec 2025 09:58:59 GMT\r\nexpires: Tue, 15 Dec 2026 09:58:59 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 600556\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84380,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-09T09:51:22.263205Z","times_seen":17616,"resource_available":true,"data":null}},"time_used":1225,"timings":{"blocked":291,"dns":3,"connect":36,"send":0,"wait":30,"receive":28,"ssl":833},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/stockfish.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/stockfish.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6472\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1948\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aGQ%2BRhlARP1s9R0AiykGJHFUh2VO%2FWJMeibSdW61M6njyv3HH%2FRxApTtvAVX0YQM2jUjZbrtdK%2B40vZ6qIgNAyY1fexFdStppIa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be81bb2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"038f199b143071feedb49cda8e9def4a","sha1":"f8f843fd5a9d52aa4d91bc2eb8148055e585acf3","sha256":"aace200d53664714aeab493974de493f77f631f655647667bb74e70773922c4f","sha512":"2b1946c1c984b1a56479178f113950a0fb60e4914ba615bd6cac20bb9d5f268fd1b142005e26cdc4d0ff0da7ae113a54f8098bec2744f754bafb5abf0e4a7c4a","ssdeep":"192:hfwtpaimCfo5Cn3cl7yvQHbE4igh1guUu04d:hfwt5A43GyvQmgPeuvd","tlshash":"c8d19e19cef00346d88997b031c367ba5b66b8b01dcb26bf0c427b3f8a94d809d1957d","first_seen":"2025-12-22T08:48:47.594793Z","last_seen":"2025-12-22T08:48:47.594793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/racemaster3d.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/racemaster3d.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4526\r\nlast-modified: Wed, 29 Nov 2023 22:06:26 GMT\r\npriority: u=4,i=?0\r\netag: \"6567b5e2-11ae\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iJfaUTgLnI%2Bp9l6X50LoMt7Yv6R%2FPpo7UVK1MTgi5Bb5mmzNm%2BCSQCG70qJyrVNYgocKck%2Fkdb9rFAd853RFmxT9%2Bzktv2necTd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3caf3568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76ea209d56eb570138806466a26f2f7c","sha1":"06aae301c8ac7e4724cc1c2b2253ecc8003db340","sha256":"cc12b657aa2357277cdb00ebb54a234d6937d3fffae125e86c1cf27e43f13ec3","sha512":"3a73357ef8aef2af7795fb54ef51ba92b83a7752d89e3f3f61a6ad9d5d25becf5dca1401b9d367d3b9e6b0320d397745f620758808f0cdd9ee0acd82a2200814","ssdeep":"96:hpeuP1qGPXWwawjKhlYaYI0/b5xSVEcma:hVPk6Ww0Pt+zEEva","tlshash":"6d918e9285a3e1a2f1b6a63085253ce4e0e2091c7eec115ba4ffadcc877046e9677159","first_seen":"2025-12-22T08:48:47.595997Z","last_seen":"2025-12-22T08:48:47.595997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/natfixer.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/natfixer.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3640\r\nlast-modified: Wed, 29 Nov 2023 00:42:43 GMT\r\npriority: u=4,i=?0\r\netag: \"65668903-e38\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fu%2BS3V%2FkrigiFpWHJMhn%2Fp1FQIqAZmFEUTdYF6UGiSMe5weqW1Z%2FboQpHYsWppZV%2FhiGD%2FBwL8d5v123bdUoTvRK1KgIyYn528yf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3dafa568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cab4d69b171f5da34b6f1b2a89080a0a","sha1":"a166ad4185b5dcfbfc48ce441fca99f8b621d2dd","sha256":"c08f30036e87c5f2f315dbd68ad4e823d9022f730a0fa2d216e0c0a264c9ef3e","sha512":"fc2df09021fe475212f12b1e27cdd46334610290a0d590e96f851e11c998bdcafde36971668d98a29bb25dc56ec6379943332da92481835affe3b6f79587e0b5","ssdeep":"","tlshash":"bc715c5ba0e9b718616d38fa3220cc821fca41080d5d66129b2bca51d04f2d3fe17bde","first_seen":"2025-10-23T02:54:45.379252Z","last_seen":"2025-12-22T08:48:47.597134Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/zooba.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/zooba.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6500\r\nlast-modified: Thu, 31 Aug 2023 01:04:26 GMT\r\npriority: u=4,i=?0\r\netag: \"64efe71a-1964\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOSS85Z9LElLzhKOO7x%2F%2Bycezkj4rHt%2BoXNDtwUAtzL4z8JkuUb5BqMPJmZ%2Bx9tQxQ%2B3Gk%2BfaBL2j4A0kEbIWOfSAVSOD%2FGZEYyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b10568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae3a9194f61fabeaf8f4948bf77e250f","sha1":"51636496cc8d897091d94931c9b4545103732a85","sha256":"75bd38997017c88ec0dfc998869d0f6a823d67a972daa4712164f0d184a497c8","sha512":"68f274c3b6bc673c215d2884d7260dfb6ae98f115842cf1070c5b59f41fa77728319bea211a17d0a49548d4a187b1b72eba617273fff2ce182cd985df49ce3c4","ssdeep":"192:za0fMkaEnvQP9JJ74KKgLKbT2I1MekkzCRk:e6MkZC3VKhugk4z","tlshash":"97d18d5c4a85a628c5b6df7ac88726604fb0ecc7714942e0faca66839d9d38acc72117","first_seen":"2025-12-22T08:48:47.597858Z","last_seen":"2025-12-22T08:48:47.597858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/simsmobile.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/simsmobile.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4196\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1064\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DXMQRDh8sIZQ2q3k14Txdb4ptvjvJqpjxux1s3Dwcc7qZczsfloqkJYCq1k6EMQYBTiTAEP1%2BLUu%2BFdXUrYBIfPAMYFYPLU6ofC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be48b24568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"305c335fb02a9e03bc16aee0843434e9","sha1":"39aa37568000b5e85a8acc1c9d94587bde7d335e","sha256":"5372a1ab4ff06b506176e3eb0f722380142bd2f55c65a43424791a840607ae3a","sha512":"4450cfdace5ecd42c85125b34ac752b67614c44eb5fce7a845aa443dd946bc77d62087dd68db4e1f06f8158a57b1ad518b65c3cf499342a55cf975f3d927d28b","ssdeep":"96:1OCP1b0xytpUK1HzAkvMT1PmjppqKC6llg6uy8JZBy:1OKVpXGk0T1+1pBYVJZBy","tlshash":"cc818dd87a49e07fc846d43b252d433da138b4ab43adeb036e89bf9f9d2404045f195b","first_seen":"2025-12-22T08:48:47.599009Z","last_seen":"2025-12-22T08:48:47.599009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gardenscapes.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gardenscapes.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15796\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-3db4\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VESdDFPdCR1AKMdwOx%2BJDJbuGg31dLCcGLUUgrvxRgbwg45nGojxwh2NOySbHXuhTEp%2F74P2OwjusX%2BKZASa731l0xNUT%2Fk2DYGd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be58b3e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15796,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"ac4867f1b1587433abf77d8e583af677","sha1":"1619817123d1213fe362f682eb10c5f520fedc65","sha256":"12390b1c6dd238523b537c51f1801c7006ae85c2e0e874613ef070bb2973ac7f","sha512":"c70b912326d754cf42200bc35fd5d49f2ff72ab4aa299b3999dcf676efacee6ed83529945cd74e13fbb8a0ba26808d8f39b283b2cdd72d984c1cf6f0d7144f6d","ssdeep":"384:afctyKT8I9qwj4OQUtmC3Vd9J6Wr6Wjo5hgNWk:oKn4PUwClVT64obgNWk","tlshash":"4962c0434a99afc3c4e015324ffa833b5a1dbc967400c105bff565a921583f58e3568b","first_seen":"2025-12-22T08:48:47.60037Z","last_seen":"2025-12-22T08:48:47.60037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/locationspy.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/locationspy.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8496\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2130\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TNvGSYfUhP0kTOh747BRqSgObgmHgZZzV7fJxBZQP3GOiXwTDRKZhEEwp8rS%2FhxUwNWxycTusNb3%2BDFQ5cExctnrq8KVGAlOrb3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5fb55568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee93ebb0056f5637e31a2fa7124d0493","sha1":"96ec56092a5f93bd5efd16df34a7e48e6f556722","sha256":"e697309f88b1721f7ecf3205407939004b741ec7692865108ab3cb0d99e6f3f5","sha512":"b7d1d6bb022057fbe8c9a558d2b4e7b921132bfe8f33dfcf98a3539fe290db3b50d0f4e973a0554b1e69240fab936cbe4528d4a1ad3b6a2089ddca919de1178e","ssdeep":"192:Bfw6OttI77Vpp5xfsLmCHlFGX62LmosdpMWMb3gJ9VZXS8pLHp9:BfwfIrp5x0lFFN2LlLbkUujp9","tlshash":"2e02afa793f56ba4d455677513eecb1903b8980b8a4b13718a2440774b688a6cb0cd9d","first_seen":"2025-12-22T08:48:47.60149Z","last_seen":"2025-12-22T08:48:47.60149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/onlyfans.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/onlyfans.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4989\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-137d\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTmqWVSwg4zXEYZlyEQ7fE8Oo4f5ohGcocjL3r35obDJSnllFo%2Bg%2FZaDJaA%2BNYtJEq38pWc2GOu2gqA%2Bi%2BX2lgeVziaNKOnvk0Go\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae3568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"420a7e2b66ee0af739436c26d9cf85e3","sha1":"689c9cc8f97ae48555b153d3019af3ac2f70948c","sha256":"8678493150243bb0250f1cf68039cae2aef3dbf5fa2e590d9336ad7989cdbe56","sha512":"fd2f83cb2327d34c7f3923bc436f5a7eaebb44d63d3570a7e8e35b94fb3fc597e06ae0f19498dba5197256a6e93b4825121fb11ed859420a89859b0de3cb96f9","ssdeep":"96:c2PHM0x+VBnXDXbdf/RLgOduMv1r5KTTdQIuoCcIS:40xanfx1reTdQlo5","tlshash":"bfa17c1efb013b82ec8d8e7a08bba9a229591041a785cc62557bd342d4a65f04d24dcb","first_seen":"2025-12-22T08:48:47.602835Z","last_seen":"2025-12-22T08:48:47.602835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/projectmakeover.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/projectmakeover.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5904\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1710\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9AWrtD6OngebZDAlThutCorWzLENJD6kv9RUXOXlPwv6jT%2FeciROncKIA0LJvkqiVWAkxxyhEiRuReM8ftRfnGt34QqgTAryiXK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3fb07568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0caf2b301e42b196e200c4dace8b234","sha1":"3710049c3e217c1ec7ebdd4326c8bd6630535786","sha256":"df88003b83f798e16e2911d916309fb2f16bd71b94f5aa86ec102e18c130e44f","sha512":"df395f2922a7d4b3230f7a888743f1c59df557fc86865cc117862623dbac989d98b68a14412e4cb980fbcb50d15481e5991b87a90d52d5f4ee664b10f4055fcd","ssdeep":"96:3PTAYYvhgkTfFZdygFeqRwq86JEbd99L9Pcq7QGGmPlvzcpULRcKXNBi47wBHNKw:sYyOKFZ8+wB6JEdZEGoUWMXOr3","tlshash":"64c1aeb398029fa7d15b6176a7dc0e92d761cc2280e64d9b19ee6933dcc0fb706c8410","first_seen":"2025-12-22T08:48:47.604544Z","last_seen":"2025-12-22T08:48:47.604544Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dinoknight.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dinoknight.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6260\r\nlast-modified: Sun, 17 Sep 2023 23:27:27 GMT\r\npriority: u=4,i=?0\r\netag: \"65078b5f-1874\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImINIF%2FStG0DUYw3813gmIBnYP64eNtNcG2h2raydhQHCICu0cGpPyWCKHnKBn8Kq895WAuaXInxHS6HcjXiijgjuZIaiTrqCRfM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb48568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbfdd35a9774b155e1fcca073ae0f3bb","sha1":"b3b3bf3489ae27847f45627b45566b98910031e4","sha256":"2b6a782e65222692f62fbc43fc5d112dd183e1c57dbcc904dae25fae03b7d894","sha512":"33dfbadcd679f46ed4d466f2f9300f7320b014363c29731abd937d8ef38192b8281a71a0166a94dac797ce3803a32c19b300dd9e3eb685ea00be311c0f2c941d","ssdeep":"192:GGjyWLNb79hpjpdX5nZjPTDH71jydu8qNYjbR:GG+8Nb793d3nZjPb1j4VmYR","tlshash":"bbd1ae8206e3da58f43dc974a1f8b4999346afe3722457c742cb2b3c646065525626b3","first_seen":"2025-12-22T08:48:47.606169Z","last_seen":"2025-12-22T08:48:47.606169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/chibimations.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/chibimations.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 77396\r\nlast-modified: Mon, 11 Sep 2023 00:29:56 GMT\r\npriority: u=4,i=?0\r\netag: \"64fe5f84-12e54\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ax0RAcTFHhA5H2E2AheO%2Fock3EVEviim69uGbd7Y7oJ3xvLR%2BJT5y5Qe5qwJRhluhTFfvWT5GsI1ZkUxGFrLzezyJBrmuOhrRZ%2Bd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b66568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f198868c9fa5a7bd52d5f2c80bd31c77","sha1":"d213c2734d15b21318b9739f0f8cab53f5deacf9","sha256":"0a59db389c5a87f1309e0dea52ff8a7daec2266fe3f4f783650813d8c265e6d4","sha512":"f04bb07211817b9677b432c7abf66b6629a6958adc286c5fdc2c484ad0ae866e91a3bc2c4c4509f373908b6c36badbb5907552b7d4f9248004cf7cdedb46f35f","ssdeep":"1536:CyzwMRJVomkUAqbqJgX6fvpQ3Uat7nhsCG/NQX98KciIV:+QJVotRlJu6fRQ33TyCGi+ziy","tlshash":"b573025261eb1249767b872d7a6de30074a2e0f22775accb0933126f1fcb5914b71acd","first_seen":"2025-12-22T08:48:47.60789Z","last_seen":"2025-12-22T08:48:47.60789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:59:14 GMT\r\nexpires: Sun, 20 Dec 2026 10:59:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164941\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-05-09T08:58:21.358102Z","times_seen":4696,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":191,"dns":4,"connect":22,"send":0,"wait":15,"receive":9,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dokkanbattle2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dokkanbattle2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11652\r\nlast-modified: Sun, 25 Feb 2024 23:50:58 GMT\r\npriority: u=4,i=?0\r\netag: \"65dbd262-2d84\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0hAoMp8hvRH7VaYIUxfE4vSnmR2WZ4QX1sAIm5lV5Nt9wzf%2By%2FlzbG90PHQ%2BGyu0tp65%2FX%2FIRins7x8VIcTj6Uz7mg7Z%2FTmMdI3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be38ad9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"790a6f80435bbfb7e235d4d30c542028","sha1":"e6e94a9d1da505b8102f919351633bb631a07500","sha256":"63b590810763a1038cd76970a8080cde310b29fe273bf25a540249786bb86d5b","sha512":"59cdc1b7e3713de9f34cf38c5796e20663c38ce88955b1162cc52ecd006708233d6d5d73f78863d30eb9b84cca1858011e6b4558c46184a0d99e5ffaf00b016e","ssdeep":"192:hcGv9DMfUkuebDyuzKsjIIue4oOKMWtsFcqpD5rV0pfKydsYXjXrimDUlwPlkth:dlDMzuUDyuS/3WKFcOmiYXzOpAlQ","tlshash":"9132c0d04fa017cdff2e2e37154878284f8f4487227191652a0a0274761fe96f8f67ba","first_seen":"2025-12-22T08:48:47.609292Z","last_seen":"2025-12-22T08:48:47.609292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/blockmango.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/blockmango.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7338\r\nlast-modified: Sun, 19 Nov 2023 23:17:43 GMT\r\npriority: u=4,i=?0\r\netag: \"655a9797-1caa\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLogHklBC%2BdHMzKRfYeRa0Dn3fNRhp6cMkeVrTJkUiCOC%2B6qOAm9WkeH5H6aq%2FNuTwFhlBdD6mXDj2apfmIUrNt9l%2BZaInjs8dXB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3666ae239c8db8dcb3f84de7333063b","sha1":"ea1a8e180f1a024f65b1316c1f345c5b51f23e7f","sha256":"e53c1ea20c1775f484f9407fcef6f928879f3dc8a050fb75077139204c2203f5","sha512":"ef6a1875280415bac7bc65842aad8c103601ddff91063b3def5a164ad117dfaf97248b5ebb4bc909f76c73b34fd02865421b35769ab053509ab043642881d504","ssdeep":"192:NlysoqaYrh1P8Dy5yDYph5jcAQoaL3u1z:NltoK10DzDYfF9aLe1z","tlshash":"64e18d5662c9aac281f0abfb5468c6539048b480a2c7bff75b8729308de359e2334529","first_seen":"2025-12-22T08:48:47.619207Z","last_seen":"2025-12-22T08:48:47.619207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/saiyan.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/saiyan.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9146\r\nlast-modified: Tue, 28 Nov 2023 01:20:49 GMT\r\npriority: u=4,i=?0\r\netag: \"65654071-23ba\"\r\nexpires: Tue, 22 Dec 2026 08:48:13 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOjKB12C1BpbRoaBVyLhs%2B1S%2FBp4nDaq%2F5CXlF2VQyZ6ZyGBGdMTJXaXICouu8XSTfwGrj%2B6E5UBTa8EPT2DIBDOsjo5xNFPlu6o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b0d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2c02fe8218d3a434c6a1a4e66c59c0f","sha1":"55310da556c99428e274eb379fa139d3334cbf5c","sha256":"e65b3538172b0aee021859b063b9441c76e9476b3a81c6e9ef293067e4745764","sha512":"d1fadf87f32b7dd52c3f7ba104abf34cb1ccfc233f3b2b4d9c028b3c862db7782da9441ceb1d6ee87e954bcd970ac55b73186edf7045b09a66b53965b9f71196","ssdeep":"192:JVewPHQ/Vd0bgoizf1OSnXArP6Sd4U0Z1bnKM00m8PG0x5gPvDX:JApSbNi5rXLTXZ1bnKM08Z2Pvj","tlshash":"e012bf53ea7e5c76d75cc8ba0b0c11569c28f0bac204308699e63f69fc88252c17f29c","first_seen":"2025-12-22T08:48:47.621168Z","last_seen":"2025-12-22T08:48:47.621168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/summonerswar.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/summonerswar.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6138\r\nlast-modified: Wed, 13 Sep 2023 10:51:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6501941c-17fa\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DJvmVq45qrcZ%2F6Wnn1qIz3WkcyfYHGMAiu6a73fiXMPaic04uVtoj6%2BQDogD1z2xOwn6u8%2Bqp4kEbScbcYJverya206g8wKpubR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be53b32568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7672587943684071547125cd07117e7c","sha1":"b0829a32af720c7bdccd8c1942781ccef8d38f31","sha256":"2751d35a1a487a7a87f416785bc991cdd75d15c4cc1e08a5b03ee2ac4c1c61af","sha512":"bacd84175c97eb9c4fda147ac8bf87982c4bb7215f3094c79f5a26bc1c724160a6376df44cbb6ebfd25ac975aec95910056f9ff3f2589a5ef844bd41062bc919","ssdeep":"96:3SC2MFR9VZw7Pc1MZppAeto5SjvpKEuwediYMV4ly1xWAvIN2JFMj7h/xeEM0pdl:CClVq7P/s4eX04bAvIQmbVMMPu6","tlshash":"8ec17e54ece98b359446337a6b7e9e114401068d1c5068bdd5ea09ca9f2023ec6ab75b","first_seen":"2025-12-22T08:48:47.623766Z","last_seen":"2025-12-22T08:48:47.623766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/whatsappipad.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/whatsappipad.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3872\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f20\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFxRcFZW79D%2FgGmTpRG6VVUNrlogIqJKpAR%2BfmpDm3C%2FHEkQYHjpBKytg5h4Vy8KyEez1ZG91Ut0dIzFE%2BnnP1Hkrt6b5dEUDur5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6ab6f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d178e52c73ef2d4ad852c37f11d02651","sha1":"1ae6b261306dcfadf699483788d2c43dfcfda7f3","sha256":"434cfba91f6660ae88accaa71a2a290610883984dc1831f7b93de71451d96729","sha512":"fa51f3ace2d298befad84285497c05bd3c70e8d91bc42e120bf8634c76204bc2e07a720c57e51bb2ce949de094a34bedc5fddb048758a1163d8004291da7b64c","ssdeep":"","tlshash":"36815b7177b94212dd7493b064238fc27aab745b1c44b426a34a0bb29c008932d3b38e","first_seen":"2025-12-22T08:48:47.626563Z","last_seen":"2025-12-22T08:48:47.626563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/melonplaygroundmod2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/melonplaygroundmod2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4310\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-10d6\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCr7C0lEn8QlKLkSs93YqbkZSPx6CsSc8izleLUOU7ACmhShqxbYgcETZePfgNgtfhitg%2FfNHpJfohiv0YL8yjTwqGYZxs7oFkdw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be75b91568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c65c0cc513f94c0eaed989fa43f46cb4","sha1":"6669252a42325bfdcf78042be7b130eea400a014","sha256":"d5db3fd978de8d29d9f5d753bddd54b01b8a6a037508dc8fc251d4de1b716ef9","sha512":"b1304bdc2aefd58ccafe0d49bcc89f61f727731e06e96302d0526ce408a8a2dbd7f9c503d3b51c742ce9085fa77bcf0c7e2a8452b9f8525dd2d948a786512ec1","ssdeep":"96:G6Elbw+i/aUsAKwSLbfvRtRKUELCJxjzxQVHp0FQFNqTreFZCdNHn:Gfwb1sAK1fvR2R+LtI0KkSFZCdFn","tlshash":"48916d38fba4832df70179b1f5807715f39d76838d16181dc1da8c650acadea3c68102","first_seen":"2025-12-22T08:48:47.628894Z","last_seen":"2025-12-22T08:48:47.628894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/contactsplus.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/contactsplus.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2724\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-aa4\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUqOI%2FdQcucjv5Hm%2B1TgEiRJ4V20oD0PcxduPm%2BQyIinUDtHDdtiLKkIbMNrKH2gDeQgmlF9%2BnNHMI0JEy%2BcWFdv8IrgpuTRbAfn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7ab99568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3ec2e4f07fb18beb4a717276ff9e257","sha1":"cb25d77c55f580cf7d32b3d3cc635d081442196b","sha256":"c2521fc024fd2155e46ae2e2c342c76a0ad3204d31b7ed018fe0ec49a32e24fe","sha512":"fb63ee445cd68e3865858506cbd091a3f0a877f2641b33cbac3db7718c4ddaea2b4fc14e8f2764ceb84b8bb29102645bd54e173e5c3eefde3a9a278e5470f3eb","ssdeep":"","tlshash":"0e511ca52b7e2b76e140a574119c0b83f69dae46cfdef6445422837b0a340c1ad14f4b","first_seen":"2025-12-22T08:48:47.631834Z","last_seen":"2025-12-22T08:48:47.631834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/1v1.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/1v1.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7080\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1ba8\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1VKtFd0Cy0tC7cAx5BMsZyIpt8lmPYjvPUCUrzCzVjQQmYHsWrfaFQi7EwVCR%2Bh5pv8%2BN%2Fp2gz6GHEk5jZBn1vGAyY%2BPTwrMusK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7cb9f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6956011bfb5a77b7633143146c0fb172","sha1":"6b8e00f2a07237e39e0c54e3f9eed141187c0672","sha256":"489bf6f5d468aa5d3f376fcba1032dab4ec2d8920c9523aa57ac91916c542c65","sha512":"f5728898b9b28ae608f02bd2bc8a492ae2aa6f813bd9fecc4feb96ad7eccdb6e22e68b30a5e20cb6ca199b1e528f522a7734566cb434aef3cb689cdc3429f9e8","ssdeep":"96:vrusmBbN5b45MkmDORvTFWzESWGcBwjqQlYVqWM75qLhUsojKlaPy3DpFxmuI9Zk:jIB58IiRTwzjWvBqqQqMtai6aqTpAZk","tlshash":"b7e1ae024d98547be19e6817af952924cafef33bca1740cc4908efa85044dca7bff5a5","first_seen":"2025-12-22T08:48:47.633864Z","last_seen":"2025-12-22T08:48:47.633864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/simsfreeplay.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/simsfreeplay.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6284\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-188c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iU%2FFdy%2B1FTMMwdFymx5PIs1XlGrI2GBqDSgz5pHfNiSqGLGFiWe%2Frf46sNafeWjEiCJ7khEPSeXtOKNV%2FH7E8ZfeGjr2CuzcgX8H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be51b2c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b0342cb765345db64197ebc26abc805","sha1":"1bdb91fc804e5d8bbe5ab132ff029ae89806dfe0","sha256":"922421d54862c5a80e386c00596cf92195de97a00029f5f5aef83323ddc9666e","sha512":"3ab0eecbbc69a2d6971c0c88160c3491b31629b727277e29481ab158bb7dabdeca2b6d726e70f6431cc76b78b0e9806c948fbf558c57d00b6c00bb957ba9a4f9","ssdeep":"96:6xwipRWX5NnQVp01bC0BPTOE2Wn7KY4p+mm1pfQQveIxiMDxQT8Bu:ku59S01bRTJ2XpbipYQGzrT8U","tlshash":"d2d1901a3f311b6ccafdb77ca8be6341552dc07f3d09a617e2883557940ec055b1c66a","first_seen":"2025-10-23T02:54:44.831972Z","last_seen":"2025-12-22T08:48:47.63953Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/lotrheroes.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/lotrheroes.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6582\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-19b6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8QS1zgoR4CVce%2BlIelLAsHKGrwIf4YmUP5L23O%2FOCXtzi2Qd3UqBpLT3K3sAu2q9PKzfxT9BrR3SbzlJcBswvWyD9nWz%2F1APWDx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be57b3b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c9b4e92dd044b39531b35c8bfc78103","sha1":"b261a12f284e2104b77bf6d72b726f4f9ce83b5f","sha256":"31fdbc008975b9250aaaad513c6986fd875b13213106328a65a7a7269ecfbcd3","sha512":"aeb05d64f7d634ebe6ec4de3cfe38d4cbef5b4d5ab6b0b4000c776508dfcfbbee3658c9bda7fc3048c4ecf87baf18a94b0fde6d07f49ba7da73ac7bb2afb4db2","ssdeep":"192:R+t0Ggp38CwiH21iHksxa5BjoKc8uoAlygbIM:Qt07plw0cpdM8uHlygR","tlshash":"c6d19f8454724645ffe1663dd8be1fc617ca2467c207468b87fbb0fc66323240c1ad89","first_seen":"2025-12-22T08:48:47.642039Z","last_seen":"2025-12-22T08:48:47.642039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/survivorio.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/survivorio.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7894\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1ed6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEUOnRNNw%2FVClLFQaISD%2BH5Mg2qUZiVZK7BmCIvvPOWcc9jiDW%2FS9UvO2YF3pTEENjPz4kaGGCvWfocyTvpgqu3WdyyX%2FDPuCdG9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5ab46568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7894,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5249284454e9508bf14940a4677d1806","sha1":"f212967cb3c0149b0d725d786fd104549e3dd69d","sha256":"f53e44981f0066a3909d91ba82a43c52628e21f3536be189f0b8844452bed205","sha512":"aec6e1239bc519a8d4739cd960f0d86026007627e8d8bcdfe41a5541ebb44f5c19fa0770eaf0f6e2f8a65f5fec22a36a4d25fc13aa7a3bd5f6397310126ff6a0","ssdeep":"192:CqY0kLnfPTTjrnxItYJnbalNqjAHIxDQZ7REWm:Cb0krXPq6balNqFsZc","tlshash":"c8f1aee5d4802a74e36cd93377904e488a62f64fc27bae0c944f504b7a0f4f2f197a1a","first_seen":"2025-12-22T08:48:47.644792Z","last_seen":"2025-12-22T08:48:47.644792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/offroadoutlaws.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/offroadoutlaws.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8468\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2114\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ac3XPPEh2WRSJfT54VSHP2LZUwiJSDf2%2FrW%2B%2BaCIE0%2FTyl6UcxOMIZiOcQVI04Wc2DxJxYzEO1TswA4AMI4sGpctDnoONWnjnV86\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7dba5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31c8e5b9258aa272df9ece73cc768558","sha1":"20be53695400be80a94913af9a991d2b0426b255","sha256":"35b93592cdd629d226ec908f43be02d1e46ee07f92095467cb281a5aa62936b1","sha512":"7a4185d4b28114897f9bf1249c0fdd5cad49e1d65bb398d28986dc8d226514e950b0843e480375ae0a60e9e888954ef559b4436e93282e804e465d273b19a37a","ssdeep":"192:281QmFVso8hugVujG/NpabJfKAmE3/MdYqGOtCgC/hul5uiDq:28QmXsopgsjGFpoBmSZqGOggC/unDq","tlshash":"8302bfada1a692bccd4b5834f32e0549c0b4af5b9483a719b58963f39201d32cf08b1c","first_seen":"2025-12-22T08:48:47.646461Z","last_seen":"2025-12-22T08:48:47.646461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/blockcraft3d.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/blockcraft3d.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4648\r\nlast-modified: Sun, 26 Nov 2023 23:53:11 GMT\r\npriority: u=4,i=?0\r\netag: \"6563da67-1228\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMEKC5SAwKOLbRwaaqAGlD7qQvU7Sl%2B%2B2KSdJ6NUocpqC1gNjDFLgr8MAgqH8DktPfetHbDp6VgwpuQL8IeijRE1AL2eFQ62bas%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3dafb568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc6ecf8f27c2a6b3b1d1a41b1e683b60","sha1":"1ec8f03bb2e0619f54ee9700b4480cc80aecff5e","sha256":"4b3fa19ba6f62c2725de8414a86f9502604001844fbd882904a7dda6e40fa622","sha512":"5cf8f7d0a7fa2f24c684bf4e3ceda1b8e6b70cf38d99b44e1afa8c46dfdaf400cbcc44731a723bf0238436ce69d1c765496b3a09849c44d8c13534812c2b48ac","ssdeep":"96:y3+rZ/iRREl+x00mFoncCinrw4hmVpO3glGiPP/CJpl:yu0RREl+F0ocHrRhmVpO3glGiPP/CJj","tlshash":"6fa19f5e8fcd87916b74fd36960f08e861f0c922d350e74b95aa80587d3004add3e40d","first_seen":"2025-12-22T08:48:47.648042Z","last_seen":"2025-12-22T08:48:47.648042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokmonfusion.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokmonfusion.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15258\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-3b9a\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ey%2F41zUIfwswZd0aYA5J6UvIOBW68tfQ1Zubky8tb1%2FzzQ5LxeOYZsFMXVFOjQOhsIxjNSaGX9wTJO549DGfuDH3ryi7SdR9VJ2K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be42b11568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0791f6bd01bacd868b8f686916ef0a00","sha1":"25b60577cbb328e701cec11c2eb2b27d9d9afa69","sha256":"1bebd66420aa82acb25951bdfbb589e6f007d5f68b9347515d709f2b7af803be","sha512":"776de2e5bd423c6e6553f6ab3f8d739d3f1b9f9c5c6f8ed1edcd5b047ee8e40f68124f5efb60b90a81100f195c6c301a3d61d120d27cdecb51cbcce5ec346b15","ssdeep":"384:tfwEKsYhhblPGlsyYMX3E20arMmFLPWBRbQlYJhLnwZ6RC4cPZtC:t4eY3bQ4O3E20arMmBPVl1kC56","tlshash":"e762d0d7b144b6e8f270ddb2b852efdae0cc5a2ca8b4c7860141a9a173a25d71315097","first_seen":"2025-12-22T08:48:47.649346Z","last_seen":"2025-12-22T08:48:47.649346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nflrivals.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nflrivals.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7918\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1eee\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKMjyJbphG2pfuxGDwxMTvCpyQ9XdvsQ%2FhF4FwfpzcUrvfpBBU5c1Ji6lf9II4C3FT6k6d93Vo7p%2FF%2BblJ2k36wXerYr0bjH4AVA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5ab44568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c778a343eaf27dfa64baa60146bd5b9","sha1":"d6a2a473e3911842a23780e951cde218bdfeb762","sha256":"c7178213bc55f456c99863a102aef5444867954b0af452605a2f54b0d920fbcf","sha512":"e081909ccfa94746d60287508f5236d767971a7204a2bc0ef8a521bdffc7575c6829741449b2351c248fc2297a11c928e3f5d654eb648e425499075430a78421","ssdeep":"192:DX6PkDC/U0JAx9b80K8v/uA8zCD5i7Dtk4jOkly/cc:rSkes027Sa5ifOkly/5","tlshash":"1ff19e7f8dc07427696323afc6caa2a055849566d8de8590e9c92c513dac4c2b7a0bac","first_seen":"2025-12-22T08:48:47.650652Z","last_seen":"2025-12-22T08:48:47.650652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemonstadium.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemonstadium.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14754\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-39a2\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWU0lPhWnvfOhtuLcZ677tk6S5kghCtAQUtbUF3gQ2mtER8s2XjL4FDIibFZ%2BkEcSmOP3V0Kbx9%2BAHK0%2FhuSOYhHE21OUZo2tT0y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6cb76568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76493647c5452308416d1f01fccc4cf9","sha1":"bb06c6260d240e647a8244ca3ad19fcb3f32e4b3","sha256":"df0a9046471e946b3bd0e602f65690e17c5a521402f4d088aebbf2070d525264","sha512":"a93a4829f5664ef28d0a27d5bd9ef9f6e185491cfa10461478a1c785289674df8d2a4b5ac77632b1b3349643a5a893ee2da512dcd3a780c99b916b6eb29d5370","ssdeep":"384:ffwZSbOasknEVw7ZrL+goxtbvqDvcYWrLCoCCArrxsJcQlJxJp:f4EbOasAEerL+XxwLcRyBMcKJp","tlshash":"c962d023337b33aae628af7311314afdb57e7943079f454c998218d85e199ccd82c981","first_seen":"2025-12-22T08:48:47.651789Z","last_seen":"2025-12-22T08:48:47.651789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:15.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/exo2/v26/7cHmv4okm5zmbtYoK-4W5HIotT4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:59:14 GMT\r\nexpires: Sun, 20 Dec 2026 10:59:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164941\r\nlast-modified: Wed, 27 Aug 2025 20:22:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40836, version 1.0","md5":"9b3b8ff7ce2027b021390b101482e960","sha1":"94042c26bb2a2e3337c293ffa5cd88894764207e","sha256":"6f7153d9320d0b79ff1fe4502f0b2f9d847dc765d66414a0efb91b31096e113e","sha512":"7f63a3f2e93936f73c8a881d3cdf17e7516e54ae50b7cab42ef3a89575f9507b27fe368b48364ce7f885dc6346969e9e46e64a7eb2cca98f416ea9a5f98e154d","ssdeep":"768:HUabfwFhS0q7rdQ5DNYk1p5tLYmDEz87/yzIMr53M2ToWr1McLhgjXsucOCH3mZh:0asFhy7rdQIkdtUmDByEApJTo+Scfu1T","tlshash":"b303028073271964a8984cac4c5def62d9c32cf75b632da05e7e84f7eab2c09d457348","first_seen":"2025-01-30T16:57:40.808331Z","last_seen":"2026-05-09T08:58:21.358102Z","times_seen":4696,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":120,"dns":7,"connect":8,"send":0,"wait":16,"receive":8,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/eafc24new.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/eafc24new.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7084\r\nlast-modified: Thu, 15 Feb 2024 20:59:13 GMT\r\npriority: u=4,i=?0\r\netag: \"65ce7b21-1bac\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaQ5oH5nJBm%2BLRg41T5JOlFOUj3P270sSp6DOjFkox3gfcL3kYYSBQ7esXtU6CUq7zzuCXCjYqd7OszegAuKOYZ1yQK9byUKhdq3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be43b16568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7084,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57ca8778720e5714db85eff46ce3e870","sha1":"b4019882ddad396f38b8e84e8b2cc5af64ebcc43","sha256":"c231938d9daa34668674a33e6c96cb04e5b9287e051eff9018897256aa4121d2","sha512":"69d2b8942b168874e15d9430d35a8b02f86fed390587fae759e61a91956e2957fa06e627ece4a1f782f392611bcf32ce32dc4abac2a4e228a475bcabba7a052e","ssdeep":"192:p0Y37V1e4+JfxsOLrNjXCfuSGaHMTf71rMka30zWBZyH:p0Y36vxhrNjADGaHWBMkaEiMH","tlshash":"55e19e0631272a6ddc3089afde54e40c6090efced079aa671b8be5110fb04fa5f58792","first_seen":"2025-12-22T08:48:47.653006Z","last_seen":"2025-12-22T08:48:47.653006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/frlegends.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/frlegends.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4442\r\nlast-modified: Mon, 20 Nov 2023 04:37:39 GMT\r\npriority: u=4,i=?0\r\netag: \"655ae293-115a\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YipTu5opPKqVyrR7VEg6Rnfb98N2Fdu%2BUCqgWIFNjS7Ke9xp8Lm07B4E4jHD09QF2ljq9KqAnUA%2BLhw%2B44PaelbCh3DCp4fFmG4k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be46b1d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be338b8a4042f1c20fdf184d55ba52fc","sha1":"a71dd7b93edbaba45f6336a376559817ab30230c","sha256":"1cf362a7d353466dc8dc7efec6920878f4c5a7b92dd11afdbe56a373c9ed70ec","sha512":"7eecb58431e3ba6b6311ca0c0218b574d71b88c25c0d78689091433667951878407d75a1d61038d0da1e87101492ea2d022a24ed77fa5b27bbed997826520610","ssdeep":"96:s/qS8C/zU/eMwfYYWcuxCbkzCOn/7nzVHOxBO11wHtxS9:sSYzU7wfYYWcukbkzCOn/7zVHmO11oO9","tlshash":"fe916c3552b21e2cc28a5b7e545f76e6da178a4fb2c78b09637dcd958107aa1e4050f0","first_seen":"2025-12-22T08:48:47.654282Z","last_seen":"2025-12-22T08:48:47.654282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/jenny.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/jenny.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8194\r\nlast-modified: Wed, 13 Sep 2023 00:50:08 GMT\r\npriority: u=4,i=?0\r\netag: \"65010740-2002\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCjD1nGnbZqA5uEO%2FLPC86t6gjLQDPEB30malu25vpIijEan1d8PnEwHyyzjpegf%2BqU0YNnXqAIvMzILK4gaA%2BLTPS%2FTfRJE5YTg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be4db29568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca78d8bda70f5d25cd8e66fceea8d239","sha1":"ed45b9c91ce8a07087b4d49243a0465e6b2b2244","sha256":"1ef66c0a1222a19078f4e9625b37ba90ad3717993f2c705b480b561819813585","sha512":"74123f2fd83dc31baae1e00672eedc07966c69a9579372e07bd97664af9a4b97b96af104fae3a26fd787d3df45a9c4f765c2d23c5ed26f1545d069e96abd0c7b","ssdeep":"192:Zg0LUc8FrFZPbcNNkKqPiKgcFIX/TyD5VBdpCLwL2r:Zg0YFfZzcNuKqPi5+D5HCMS","tlshash":"0cf19eba3a48c9924422e3f5f83b0141032145aa7f840de95513e2eb5e37c997b76f69","first_seen":"2025-10-23T02:54:45.763143Z","last_seen":"2025-12-22T08:48:47.655618Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/myperfecthotel.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/myperfecthotel.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5620\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-15f4\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dR10qASYfTYcGunHRWneHC9Pkn5ywpbtczZ7kChEuuwzwllAw%2F7uoQHguDz0bsEaToZsVWmoc96JSktccQ6eraxp04LG9OEfjBc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be4eb2a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0601aa4735fe0b6f3076803abefa0186","sha1":"585a0d35ea7388c757088f27a790f5d656e6962e","sha256":"a13b6bf6318103095514ef54f13035c29e56434169e7231590bf7a0749dc3e5a","sha512":"5cbcdccb0047b9b24636fe60e01fa966c5cd75067287fae970612a9e2be940942b5cb09527d25670dcd147db69d482096c4bb803b82906ca7b3545af53484b11","ssdeep":"96:unfBbAc5zTLbw+aKXXAtepmvU+Ubr2rZLQWNIOH2Kl6J0SlDL4ihk7cC5F4:2pdfI+09vfq2rZLd/R6J0knA5W","tlshash":"13c1bf3d87812478de0676fbc911ddabb82cdc11a527c8d838887b61fd08d30232b5a3","first_seen":"2025-12-22T08:48:47.656335Z","last_seen":"2025-12-22T08:48:47.656335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/ios16logo.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/ios16logo.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5094\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-13e6\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXKg6ckAk4DRVWRLvodoOf10o48IymlikclX%2BAS5onVrBSXxVsWtebFw0eRsv%2FuULfrqhpIg5fI3mG9KZlFo1%2FBObvnNewArL%2FtQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6db7b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc83a1860d855f748a263b13aa65fbe6","sha1":"4d2b6d1e7c372172cecffaa15b028e248f7acff8","sha256":"edd2eb00199a1744446765d7fa126afbab6371fe3153fef59c25c7f25e1ff201","sha512":"2c69f351ed862db42052e22c68c0bbff5cbf7aef96806171eb35d5a984bc07ab07fdcde6a656aa969ee091d75ca5f343f07e3d967dd9e0b1334d7538473298ed","ssdeep":"96:h6Elbw+iX+1eloE61sU8Wv3VxpIFp476Nj9V5i6kCE9yLu2wH:hfwTgEcrk4uNj9V5Jkr9yLLi","tlshash":"4eb17b41833b0b10d401f6b6e0032b09ab782fa3149bd783bb442a512b45acddb58adb","first_seen":"2025-12-22T08:48:47.657869Z","last_seen":"2025-12-22T08:48:47.657869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/metatrader5.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/metatrader5.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4310\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-10d6\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2F2lgeRE9E1dISF2SmoDrwpddN8iccljnp9NYg3wuNj%2Ffq2LRXr7MITH6sYvNAtbHMXClQO0%2Bz%2B26KKVQFZVdF7YhaRdbHf41SRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b88568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc3ac92c9cd73a282008f0776d9d908d","sha1":"045ab6c5f874d75f337ca268d3b2f0698310f3fc","sha256":"8cf4dd332eb4a3f226b7bc84940f47696eaa901b3f6e5fc81534aaa5625d18c2","sha512":"4b8b13a12b5c43e4af06f36fc0dd8562e3c4bd7b4894d8155c93cc890bc943de8883eba40a77465afeb1cf359f83b48182ff9670b6f9735bc061c82650475726","ssdeep":"96:zElbw+idG1VGgo1AM7YfOjS+nRhxSHtgQTk0uacqn:uwpGPGeepWmQ2I","tlshash":"00914c7ad3386bd8e1567a7810382729f7b8a830c7cb102246c8a2015b137d36959a8f","first_seen":"2025-12-22T08:48:47.659323Z","last_seen":"2025-12-22T08:48:47.659323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/topeleven.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/topeleven.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28218\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-6e3a\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7NDS0%2BTu0PaJfoCj85CHEFCyHsONZwzEr6ScvzT5A4%2BXihNEO5Lh1nJIJnZMb7Gjly5HCO5nhZdPB5e98o6%2BETY%2Boc%2FN6fk65Gu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be80bae568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cdcf39402bba4f6c1aa26f0f7fdf409","sha1":"97bf663bd2ec5e4187cada3f10bdb8bd267cb95b","sha256":"ca43127ebec521fd7b609ae39132af07d2f2582f05ca82d2d7d430045243b433","sha512":"888d37f7161ec65438d99b4e7fb7ca26091b88230cff5dd280937ed6dee37a6eb471d71df0624d55725ab141fbe50d9b8f323fe6003c819ea4363a70aa1f67ee","ssdeep":"384:Kwpn+8yjBn8Jp/x9OQNO9PD3WiG0qJ2tu2VU3nsL9hAbZyhTMi15vLtRHIq48D1:rpn+bn8JLwBHugJaFyVMk5zfyo1","tlshash":"87c2e12ce77907b4e40a7f30a986d87adc70375b54dc24ad07c44ee2b97d065b289bb8","first_seen":"2025-12-22T08:48:47.660875Z","last_seen":"2025-12-22T08:48:47.660875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getcody.ai/widget-backend/9b901f91-cfd4-4add-b3c7-07cd8a180eba/state","fqdn":"getcody.ai","domain":"getcody.ai","tld":"ai"},"ip":{"addr":"3.231.135.106","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:16.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getcody.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:C9:49:A1:FD:04:2F:AC:B3:6F:C1:7C:96:BF:AC:5B:AD:6D:1C:CC","sha256":"58:23:6D:E4:D1:CA:24:85:26:A9:02:E8:F8:18:86:52:E7:C3:A0:10:BE:C0:10:D4:70:DD:F0:D7:24:93:36:F3"}}},"request":{"raw":"POST /widget-backend/9b901f91-cfd4-4add-b3c7-07cd8a180eba/state HTTP/1.1\r\nHost: getcody.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ezyplugin.com/\r\nContent-Type: application/json\r\nContent-Length: 36\r\nOrigin: https://ezyplugin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":36,"data":"{\"webpage\":\"https://ezyplugin.com/\"}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: awselb/2.0\r\ncontent-type: application/json\r\ncontent-length: 49\r\naccess-control-allow-origin: *\r\ndate: Mon, 22 Dec 2025 08:48:16 GMT\r\ncache-control: no-cache, private\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eef334056d862229382b233da06e2db1","sha1":"9941569c874d1cf6d5dfea7053d5ef351bd8f00f","sha256":"509d161ceec9243493f537afa2b50ec25c94214df5fa5197bd01e2087b16046d","sha512":"21b0a5811b3fb5fe9ab4400675caa94ea696993230c74d1e1160736cf89a1ed09abc4769753e7b958edacdac074e51881bfb9d008930da4f22ba9b9e7f9aaf09","ssdeep":"","tlshash":"ca900200a141697752030049615e2112425041a54611201a750891ca0f53c640297f04","first_seen":"2023-10-24T09:40:44Z","last_seen":"2026-04-21T14:53:55.6728Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/onepunchmanworld.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/onepunchmanworld.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8624\r\nlast-modified: Fri, 09 Feb 2024 00:35:01 GMT\r\npriority: u=4,i=?0\r\netag: \"65c57335-21b0\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd6FU%2BxPwQWKQe1DL9%2BI8GYDWdYegfXkGf2GEP%2Fq0Jur1aFCVWit2M4gQFbV35%2F74rCviVBsYKwpMXwAfeqW1BzBHlarFkVb8FTD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baf0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8926429a4ae680e68ea6d172836b067","sha1":"63ee136a989d4fa2fac000374a0a59d25666e89f","sha256":"c17bfe4a18e157ef3ad333640452d662ea9fd4c89eeaf3c7cea73b32ab24e267","sha512":"31920ed683a0bf36a8ec1caa3c3569cb9903800541bc1c2da2c289808476b87d2ce9e067ade1d75404a07da030e138d18674ca45c5710a6e562fdc96145ef26b","ssdeep":"192:oW2zpNZeAFfId7ecIs9lWiojN6B+auh8xG+fHPsVJuR2:oWENlf+qc/lWrjNYuh8xG+fHPMuR2","tlshash":"34029f3580d3c0a7bcb08c37e3ac5e6d431925ab9076c5559d58de4c2ab35ab237c15a","first_seen":"2025-12-22T08:48:47.664841Z","last_seen":"2025-12-22T08:48:47.664841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/beelinguapp.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/beelinguapp.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4928\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1340\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FnFLDljdNCG3EP6naMi9AlOCDP7xPiAaCg4EbbCR2nSma7t2MA6K0RaeVW8XllruQ%2FfMOEUqahF%2FAZ36VkP3KcFj6Yi2kVwp8C1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3caf2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c3eac1eec08d78282bf257d1742181b","sha1":"ff0e3dcd1d9e3ab8acaf527902b453aede165cc1","sha256":"267053fc94f5adff1eda3549fa4a28a3781950bfd3f0fd49e55390c27c49d8bf","sha512":"daa54939d8dcfb1ec4f1d3434dcf80425714e1859a3ab2f360abe1cd980de443b81f0ee81a1cca2148e7c794b390f13e9ac4ed5a2c2264d0f3564f17e61ab709","ssdeep":"96:wg97qypSeGW2zNtF3mXjsEBELIfS/e98x32G/9IdM3GtRm/y/gQpj8jOcTIMLB3:TdpSg2zNX344LASe9852GVoMW2/y/gGY","tlshash":"fca16e181df44fe1eaf7b536b36155b5fd1291cba8946e3271df1c74006e6688b1c348","first_seen":"2025-12-22T08:48:47.667069Z","last_seen":"2025-12-22T08:48:47.667069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/avatarworldcitylife.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/avatarworldcitylife.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9772\r\nlast-modified: Tue, 14 Nov 2023 00:34:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6552c08f-262c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VbS3a4YknC6xhcsoVo1TfHi8ZNttu4E%2FuVi4CO7oaagK%2BeBWLngFdAAQKmMEpIm8rOj%2F75CLy9jCqZZo1%2F7zhvVUoBzKrDoPFpQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be44b17568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"563a833e424e02d4359b1e9dc8fc8721","sha1":"e3bbee77f583aa77f0ec60035de9c4c4efd1b7c3","sha256":"1150c0646c57d4744798b2c108d264d68b3af866ec9dba2c9023691b2620327e","sha512":"fef789f2d4571b7b6aa795a448fe6d17650918cf0ea5bb2ae3020df7a47738787522ef49eb2d97d336275f85f6914bffa43c16372ceeb546afb9b33069a4e66e","ssdeep":"192:UL8oiP4b6b2phsp9Rti9nZ/OjjLFKNd4K9Jof0mWLR7KooBz+J:UL1iwmb4spU1Z/ecNd4UuWt7KfBz+J","tlshash":"8012af6a3017fc76982087b4a4da941164a41a96ecfb4422f08fc6d0d8dc7a9a3c7997","first_seen":"2025-12-22T08:48:47.669333Z","last_seen":"2025-12-22T08:48:47.669333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/ezypluginlogo.png","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /ezypluginlogo.png HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 7835\r\nlast-modified: Mon, 28 Aug 2023 02:02:29 GMT\r\npriority: u=4,i=?0\r\netag: \"64ec0035-1e9b\"\r\nexpires: Sun, 20 Dec 2026 12:48:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158395\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkUNOvC0oTcGjwRKtAAND82RsYxqvOLdlXwleVtp%2F6J%2BRNWR44JgMGyZ4lFFWCD1T7FL%2FwtxLZrdYUK%2FKNxeje9QWJyaVbY7xl4K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be35acd568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"2cd92a615002d8d285bc921555b78386","sha1":"67a7d7713a300232424b796afb61bf53d808b315","sha256":"6c8d0ab1402bd8af8611378b309b73edd1c50ddceed757664cd7097d0955e14e","sha512":"f00f5b36966d57cfbec03bb7bab970f8b2bd0d6229d79498ed8fa0c5986d9089ea41924575530114f6c2d1df11d878727f5ae5305a4abc99529db1ec866f4200","ssdeep":"96:m2Om64vmo06xwM3dlm3Bzgo2PotvBW4c/w9fQ34qaM5q/cWxj1dgvQXNMcsloaEx:7JaegJvBV9ooSWrdzAlvEyS","tlshash":"f0f1ae21ed87ed478c58c18651fe5631321538f056f062362f46d8bb16ac2ff1686fc6","first_seen":"2025-12-22T08:48:47.671461Z","last_seen":"2025-12-22T08:48:47.671461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/mhspoofer.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/mhspoofer.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13804\r\nlast-modified: Tue, 19 Sep 2023 22:31:47 GMT\r\npriority: u=4,i=?0\r\netag: \"650a2153-35ec\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oc3HpWTCW3WAk3ZG1e12YVV4teB1%2FYwzWQW3pOEIijTqgV40D54x1QiB63310SBqsTW%2FhODtmz%2FyJge9wbUuXZWEu3dYe8gMxyjm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be35acf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"12e4cd05a2c691f80b9c6c46e890d6cf","sha1":"ceb6963691bf3465c3527e13be9daeaf18990d9d","sha256":"c7e78abf3a3ce47899352c5e89a871694e380a38a3f96f6a2a4aea397bdf8415","sha512":"28925c907dc9cfcf21d42a1af2805545263370f874ff96ac8fd87c72c255a506337de3f313e73c3566f501da830226958fe17c05e7c3629e76f22a393b83788e","ssdeep":"192:D+Y+yS2rTcIbLKz+9cphXSI3Nsry1T2+gTRVV93hk4HDUq3lTFOdfwSV9EU+hQ5V:DkB2XcqurXnr1T7gzhk44QBkdfp/sh83","tlshash":"7752ae5497063789cd9e4a4ae0fea2a77384047079f8e30b79f948475dc61f28ca27ad","first_seen":"2025-10-23T02:54:44.688774Z","last_seen":"2025-12-22T08:48:47.673325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/cartube.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/cartube.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3184\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-c70\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3g0oCZJrXhKHCWE86FEHqfFs2zoFPC8FDqcn3ae3h6A3xbOOkqdXWunIbfgaKueQ%2FYbHn%2Bn6C8tC0uVrt2wlXqf8FawH0XxB1Doj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96ad841f60fa6562fabadb05274cfef3","sha1":"ae37cd717d5f85795b9eed16f02b65deca2c614b","sha256":"cf02955c8491dbc51403d341bc13a1619b1348f259baeabc79c4744195cb5bd9","sha512":"1d446c0a89e1ca6d118511620d4d8ec3a3e2b5c7c880c6739949718059ebbee2bb440b5d4bc0fb1978a18aeb713bd6e60a7b53d771947b2ea6025e60e573a1d7","ssdeep":"","tlshash":"fe613a7612b9c358d3776e3568510640f2f897ff414b39d55a9c42130b284d7a46eaf3","first_seen":"2025-10-23T02:54:45.048722Z","last_seen":"2025-12-22T08:48:47.675294Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/8ballpool.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/8ballpool.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5652\r\nlast-modified: Wed, 07 Feb 2024 22:30:57 GMT\r\npriority: u=4,i=?0\r\netag: \"65c404a1-1614\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFvWxWt1jy4axyH2Bn4JT5uapNsxAbaueXpTENvWeH7hcGhlv0NzciMd3GUUh7dX3J8FxQgodqalhFPmSlXUsGYQ9kXuEMUAcA43\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3daf6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5652,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44b0e0bf9c26aa12db65ba395e334411","sha1":"df114263dca0736de86b878825b63b6e8da18b27","sha256":"338dc2c41555dca89768c0562e1b081813625f4ae7ec36fe8be6a6ce6d63d56e","sha512":"151678635cad09a46e793d95046bf404c43a0fcac32b78d0598929ed4d72a4243156542ac851cb21a4dd69274bf9d20a48f365b1bd6d38d45368d51896a13abd","ssdeep":"96:ffM4rkQ52bOxoNGnMTZdfTYFzvTcU8L0WqMFenRVZMDIjOzq0HSYR/URtQfJ:v5ownMTLGHcUW0WqUgRVZMDIC4gMP0J","tlshash":"b3c17e936a4641aee0ed85fda3799b3093e7185d32dd42f80149189c7cd9cf8f226693","first_seen":"2025-10-23T02:54:45.26139Z","last_seen":"2025-12-22T08:48:47.676152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carrompool.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carrompool.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5488\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1570\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXvln4w4ScLZ9GcxqyVixV9BUgocKH4RCRz73%2B04glSLPh3V3PlMHHd%2FY%2F45WbgRpavHisxXjEtOFkgDQRjk09wKlDI%2BsJk8ybK6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b63568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5488,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"981bef1cbc810c0285d848ecd1f8b66e","sha1":"0119ff959af17fe9aeb37be33a726078a95eba9f","sha256":"121fbc260229af77dc516e57096eedd12f6864bcaad2927a81aee0e73bd71818","sha512":"d5c0d6c02ed258554f7f45a214daeab581745c44617d7e057cff1183487464f50514d98dab68b647b1d61a827955c1781b02e1c5822360ff70bfa7de9cc3117f","ssdeep":"96:OlymhOHgxhedAzqm03QoKD8axGAEp3wqFieBoxfX4BH7Y2p50TV9H1h7GFdnzrpn:mzhOHgxAAzqm03QirA0g2ieaCH7Tp5g+","tlshash":"beb18e7a284f51a8d48dcefca23ba431d71955e0d33307a97ba4e0b9e1620010dabe20","first_seen":"2025-12-22T08:48:47.67691Z","last_seen":"2025-12-22T08:48:47.67691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dominos.jpeg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dominos.jpeg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17222\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-4346\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x61yRxmVulhBTYU%2Bg4whzw%2BT3L76%2FEEs0M%2BPK3OwjAUODHPxCFN5GgInphf8i6lA3gll7InYoU%2FY%2FPR04obFbIIawW2arXgg%2BwER\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be66b69568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17222,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"e8a8cee6e731ca33e5ceb937f11f1d1e","sha1":"13145f3df4fcee1ed21de8a7b04bf564332d2c8e","sha256":"51a1c4e80d912d19612001dc7dedd89947f9d82453222b55e7dc229b75bfb10c","sha512":"e63e4a54768fdbaa8e03e2d12ad03088637462706ced5d5bf28b6c9f4edc81748fe62dc01941dabb708690e24caffb996ca81c33a1deb2e154e7544b12db7f58","ssdeep":"384:4YNg7B8U2dg9x8GY8eEXKxxN38Dp2nqBhcVW1981pNY5:4YyF92qV0PZqBGY1y1pNY5","tlshash":"bb72c054bb1b6f27e2f39571ddf3afe2a7a319156526d58c34b48f8c10a3981348b03a","first_seen":"2025-12-22T08:48:47.678534Z","last_seen":"2025-12-22T08:48:47.678534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/fireanime.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/fireanime.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3978\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f8a\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CN4HELNMjPHkoykKBzvmKLtAU1PODm3%2BITHtnkMxZCPACIDz3Aj8LNA5fEqsaqYAoQbUeuBwligDw%2B8BIE4Di4B%2Bywvbx9mRvGW9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be73b8c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb7216b8a7fd8baf5e7748c1195b8825","sha1":"60037cba3080e214dd98c61f0267b32f8a6e332c","sha256":"2eb51364c788673d4913cdcaeddd714c97360850c934814381a2ea1b4916a3de","sha512":"282680a351ae54b26d90325e4192420e9836c51373899b7efbc14e107528df71ad569b43e332f83e5e1132e19df412151430c0dcbae637b1e171de0c3dd4748c","ssdeep":"","tlshash":"6e814b9063257799f6d0c7b4640263f65372e0c6120f86bea4888db38b3d24aa0951fb","first_seen":"2025-12-22T08:48:47.680314Z","last_seen":"2025-12-22T08:48:47.680314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/grogustickerpack.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/grogustickerpack.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8086\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1f96\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSnfmfFRfYAGpsSkK91kkrrOSl5bz5UxyeyASKr4X7ebb5a3DQZIrwIAMsdJtnEZcCJXpYO5MeFKzP6A1RWXyPA6mbgzwmhYacEi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be73b8f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"981f2e1783ed8710829425c91dab332c","sha1":"b764c17301f57b8114a1ab12a7342c3d5e1a91fe","sha256":"18e4ea9580bd6f9c16dd89f4286c5c2fdf389e7c293d6989cf1c58b0c01f1fa9","sha512":"fe8fb20b39763fc17cf089234d24c4f6b9ce06d51c2af361c9127b8af34ca7b16053480e8ff59eb79b7806b839a3d20a6113cff9a0f92c8d3eb8ca40c8ac7be1","ssdeep":"192:FfwsipEvdBXhYnwo/35p8XvPMDOxWOdyJBHyst:FfwsipKVhi/5oP8gLABb","tlshash":"6df1c0724d214394f174ea300522b70fb2a4f12e5a53a68ae287f1e3450b7fdb784b67","first_seen":"2025-12-22T08:48:47.681766Z","last_seen":"2025-12-22T08:48:47.681766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/retroarch.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/retroarch.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2004\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-7d4\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiaALKZkZjIdFdG0RkwKmbO1xcLL6OEm9KYMnueUYCiiF7bCkdwxFF6ewHEUUTyqOxtWjSakQEHoDQis5YNlehUMO04EE475iu2e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be39adc568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5254a230aa7c42a632516942ea03d552","sha1":"5f50db60546862d93f67e0d21fd3bb5bcc08b39f","sha256":"c664538c4dfb979a3547a081396cd80b16e5e9583da91ec28a4e24a183f94620","sha512":"4e0f750cf344236bd609ee5cdb71312b41d77f2e93155b60fc5b598fb92f3aa9b02466dd33531d8cd5f89ffec29d7075a32d8e82484940b6f6c6e713afd3f527","ssdeep":"","tlshash":"1d41f91a07606bb9d19ac9b530520fc2c35b37205771a35c8181f212372d8917f2d68b","first_seen":"2025-12-22T08:48:47.683296Z","last_seen":"2025-12-22T08:48:47.683296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/bussim.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/bussim.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5348\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-14e4\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZ%2B6rIuf658RWtIacnYHB7sgggXVIaK%2BD%2BAEqtyDSN36rIssAN6xt3ninQsPN0AsLrf2M%2BwEEdeRLMsX%2BadiQ3IvaNHzLAZoQg6P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5bb4b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90c9186c2bf2e604190bf639efb22869","sha1":"89e58cbecd95b51a4380c75d8c3d81ae9adc238d","sha256":"31382d433681f4ca69d8c1261b32f2ce2d8c1f84c3f59d42e29bf8c4bce57f55","sha512":"a83ddbe8eba50b31cbb93146aeb519544fbc1cc5fe2773394d852cd979b5201f0f43a76e87122b5f480eba3332de6f9324f317b59edd509787c7720e8b29b010","ssdeep":"96:saYrDRByIS9zCz8lmwZPUWusYyJFqTNVB9cOOWyXKjHdifF:sHDRByIS9zCz8jUWXYyLqH3FObXKjEF","tlshash":"d4b1af18655444f4906a1bf6c19cd99a79f6a18f03e0adf2c3c963cd491a1316f0fe37","first_seen":"2025-12-22T08:48:47.684919Z","last_seen":"2025-12-22T08:48:47.684919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carxstreet.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carxstreet.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9674\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-25ca\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQGexOpkUQzMnz8sDirLnFiTI7nd9htX5kbyJIZq4NSJFLrE2OYUF1Va%2B2ePHbmBxHyBRjn%2FNygv6Enghf6cTXH39Yb1MFNDTCp%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b67568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4159c61ea3fac2368337c83a8b7fc421","sha1":"9284bdacadc8afc1f9284e3311ea22eb02058096","sha256":"b59ed7ef634bf6148dd3808cf730deae0c75ca206c4d42ba0bfc604956bae192","sha512":"51d25f119055126466d875b2427a04e7fa4d757d42da89fa2d00a410c8e9bfc8974266f24de790572fde005bde10e32fa263e4f0e6c50c630586f546a91da0b7","ssdeep":"192:TfwzFCqXZ3ga3oAIRHxUwBTbqeLXDL821QC7qAKra5o:TfwBV/4VRiK3DwgQCOBrGo","tlshash":"f212bf5b43b00289f7968cf5d0cc1adf736efb16c2e726595250e2139e28a486c68796","first_seen":"2025-12-22T08:48:47.686335Z","last_seen":"2025-12-22T08:48:47.686335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/ppsspp.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/ppsspp.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1956\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-7a4\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzxZWF28sXSAKl7yR4IWYFoPlgaT%2Fpf0kNCGaTuvCrSwHGp7HUhEW1dYmdJVhCjwlqc1%2FKd%2F1JckLTeYDsT8%2FKZcdNOsFO%2Bkn%2BH8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b85568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f2cd40561d4b490a83c50d2938f51c3","sha1":"3a530530181a83603bea0879d2371b38d2ebb0bf","sha256":"19de930a8a74a0aa3519cd745f800b576d61ba2dc87ec8a5cb662ea337c3f23c","sha512":"229b303b8882e54355f8754e5211f2871b5365c84c87f4a25d3a17469541873e486968098658c15608e88fe9a8244413506fdf14899cb5ddee740597293c427b","ssdeep":"","tlshash":"fa41e92823212745ed1076b458816f93d7b8b63297b993e6c08843261718bc8bd8e79b","first_seen":"2025-12-22T08:48:47.687836Z","last_seen":"2025-12-22T08:48:47.687836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/delta.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/delta.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2564\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-a04\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTqg8qMFKOZIf8phzlNXqabF1cQMpt5zfQ1MJks6ot%2FllQF4SYscIAvt%2F%2BQfiGVpOTK0bNhENBkNgswQ%2BuOXLpScZXut5WIgwkxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b86568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63772b17e730abb457bbdb5c012ed691","sha1":"52e4a7801f9419d2104a73c0e0679484c4079638","sha256":"5e38c6e8c010a0a5cd83a2fa4a9bef2aa7200207107dfc0ceef5da54d6c59a33","sha512":"14a3e33cf20d90319e52a3c8d8b90463071b5ae27c9e7b225a240506bdc28fbb640768947bea63cca424dd13352f595ec7505602afef19feef87c1ddeee7efcc","ssdeep":"","tlshash":"65512c704321ae59d6806e773d420b75d75c7a77c65b7608180201b41f954c628ed7cf","first_seen":"2025-12-22T08:48:47.689173Z","last_seen":"2025-12-22T08:48:47.689173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tiktok.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tiktok.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5798\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-16a6\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDm1q9jTp5Kd25L888Wo6KoEDR8r80gGu5cz2eammISkFSvA5HEYFGvhOJlOod0grEVemaxajBfu2%2B3mFam0GAzr82rSHAKr3DUL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be71b8a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c938a64e09a8ca5bf3d36037bc06a3f7","sha1":"c652504c68fa74978c7cf3ad20b911745e3b80dd","sha256":"96cb14393f779313e7b4e34fbd30aa9cec1666e756ecb696db61bcff1a0a349e","sha512":"f55c7c6be6a14e8d2a03946a55f944026cdfb49e0a7f6be2a6778827114bcfa7fa54c70e9fa56b1a406ac742bbd2ce9fab11f728bd34cf52a332868af57eb5e7","ssdeep":"96:DElbw+iPagvXjo+dEbvXWzpFZ+QcVQABuE4TbURS8ts+MjlOn1DzbL/qr5Txi41:+wDaQo+AGzLYzl4nAtxM8nxzviNTB1","tlshash":"a3c16d6092b8e94fc9903c7822fd9a02eb7e75b1ba22486df515d2452b647c3305a0f2","first_seen":"2025-10-23T02:54:45.436946Z","last_seen":"2025-12-22T08:48:47.690449Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/carxhighway.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/carxhighway.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7918\r\nlast-modified: Tue, 05 Sep 2023 01:20:38 GMT\r\npriority: u=4,i=?0\r\netag: \"64f68266-1eee\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDP7LxpZXBn4dABDeyC8bp3AiRctplLc9hgPttXD0%2Bk2IBIWe6BjKeqP0ZxjFJ3%2B8SfW%2B0b9AO8kIAkD8KryC2lbCvQU6eksfnGv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be76b94568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2d1d731c2c367435190e9986e779244","sha1":"5f0ebc76770851a5f83c2bba26974a7cb2052279","sha256":"918e62688e8829b6977a7a6b92a3d9bf1ddbb7deb495a4cc31c1ed6dbab0ed1e","sha512":"92210cab5ab00a2a5ee8ee7394d59b8177581d7152b6381e22eda72e45157763cd3f7cda0b093201ae421a617675a58802a2a40eb7cd880bdc566dd978982995","ssdeep":"192:JTohNIlZxms+StFd+GQXLn3CBy5o8+Ox9UWiqNAEE6dZkd6Ht:2hNjs+SDJQXzhh+8uWBPE8Z46N","tlshash":"f8f19e6bbbf3858075c1863996614c1ab26cd126dc834fe6c64caeac9d96252bf6403c","first_seen":"2025-12-22T08:48:47.691245Z","last_seen":"2025-12-22T08:48:47.691245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/psbooter.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/psbooter.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3918\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-f4e\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3xJaIr%2FgDkKs6US5r5AZ2Xx2Zep9SnVF%2FOuawuG06%2BTTI74Ie%2B6nUj1zRrIy7HZZj61iCrMsOMBd7pSveBvGG66kT5RZgEFBPZz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7ab98568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"718dba1c2b0db1b7e1e4fd4c117b3d62","sha1":"14a2d4057f09a17a1c86fe2b6ae90db9440c1a49","sha256":"6b4b01e77b46dae98c08cf91fdaa094c1883ef771d181d2a235775c9790fd675","sha512":"958290bc5bc48c67e59f09164fb11e56f3eb1bef23910b9feac0b4515e1c658fabd809dabf3491f6916077e3d94665960d0e23aa5db33fb18edad872a8e0e798","ssdeep":"","tlshash":"c88139b55339468cfd80c53d7c31ab93bf1a3e0b004a0bc99a420da5ab442a7256fac9","first_seen":"2025-12-22T08:48:47.692467Z","last_seen":"2025-12-22T08:48:47.692467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/efootball24.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/efootball24.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8494\r\nlast-modified: Thu, 28 Sep 2023 00:31:04 GMT\r\npriority: u=4,i=?0\r\netag: \"6514c948-212e\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vhmZ34UYetMNdSrkTnA7lfjx46lUYmQU8Q0g2UVHrdCmv4wj0xGTZHj0LIax6Dd7ogEgdMg6IbGjr%2F%2B%2FCo1fLzgZdRtT1XhxPCU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be44b18568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7585494d11f1be8dd1366fd738750f2a","sha1":"49ec32286b9f2d467111527100715001c5e8d936","sha256":"259edaed727e6924ac981a3c3f1d0296af9d1e3b2b65117bc84b44874e0b7ff8","sha512":"0135e01eed9b8adb9872827214f23126fbbf7cdcc12892ebf75d77403c0175af4fc8bbd3eb450c8980c17a2d4eb199ac12264576236fcb4fc08864ef17004692","ssdeep":"192:SF6F/OYq4WttzZ5P3D0TUJNooucHopRPORuA6G80so8JKTx0X:cI/Tq3tp3wT/mHopRsuA6V28iSX","tlshash":"6402af00fd6bc027c625ccfb5a8ddcadc15926fbe3a0c5231ad583708ab9746d436963","first_seen":"2025-12-22T08:48:47.69368Z","last_seen":"2025-12-22T08:48:47.69368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/empire.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/empire.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9934\r\nlast-modified: Tue, 28 Nov 2023 02:30:04 GMT\r\npriority: u=4,i=?0\r\netag: \"656550ac-26ce\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHJveFRvCBQdN9zJGdvsHC7kaZYhwx9sMZbWw9EBY3IBBwtAYZ701JHM6QL7yU%2BMASJxryZAWxasIn7NLESrqySE6luVVRG9wbP5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be47b20568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7652a0759af4650853c2a384c6eadad4","sha1":"206c1b739e1d1525f06baf2482d7f62ae507f72d","sha256":"60e3d3e350dfa3c4dfeb628cffa4477ba91fd7e8216bac69cb99f91cc8267b61","sha512":"53ed7b8fd3f580219a5f457e083391b20dc8046e3a4072387cb2cdff1941c9d5c9d4be07eb835a21ffd5fbaaf790ead9c571dd9cf270f1837dfbdaf8ba30607b","ssdeep":"192:1nExg6SYI2MPHj2U+A11xUY1pwXDnU9Lxl/jQSizhY9YNFyeACA:cg6s2rU+/g+Xg9Lbk2YNshCA","tlshash":"b722bf2531fc0087f4b34dfd8e19eaf2595845858e85b344c6d5989efb5922633e206f","first_seen":"2025-12-22T08:48:47.695057Z","last_seen":"2025-12-22T08:48:47.695057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemonunite.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemonunite.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8110\r\nlast-modified: Fri, 01 Sep 2023 02:17:01 GMT\r\npriority: u=4,i=?0\r\netag: \"64f1499d-1fae\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYXq8SUoB%2B2eEelxnQkSfOgdvVx1WWnRPg6C%2BNpl6%2Bhc7to5lXrj0fnERUEmr5vxwDsPRe1pU8zSWJILjDzNNnNMWQ81L8TFSJKG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be53b31568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64c3fa36bd7554b3ef5581c4cb240c41","sha1":"514520aefec8b1bd7e087480c94c6812b043deb0","sha256":"6a16b7133f9f57d688815a8f5e4188c5f2fc5c9c77c0ccbefe01437fc00d65eb","sha512":"69263a281aff82cad8d4cbb3a18b00f8a3493e292552da88a7cbacc713950bedf16978a665bc2275be137037faf86a438148b56e3d5d0222b4aedd6b564b348a","ssdeep":"192:eJxdloQYrUwliO/p6bwJsz/zkMCrG911nCCiwFKkw:etOZoeh6RkMaE1/Rw","tlshash":"e8f1af20f39e264cbc3d05f0276a1168d6ceb624604b90b62d9ba383179b3f65c7f50a","first_seen":"2025-12-22T08:48:47.696426Z","last_seen":"2025-12-22T08:48:47.696426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/legendofslime.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/legendofslime.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41484\r\nlast-modified: Wed, 30 Aug 2023 04:50:40 GMT\r\npriority: u=4,i=?0\r\netag: \"64eecaa0-a20c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGqNxzZDFB3JHsxg100dW7OqIICV7fBdAAFgV5Dwf%2FWHAsiP46GIoyVAHlbyEC9CH4y2fYNQvCJJRmw2%2B2a%2FHe8MJWWv%2BfDP7fb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be54b37568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f4100f35909d68942059001aab345d5","sha1":"887a491b1073f94aa4102ae92c04ce7ec8356adb","sha256":"6b45be2b92ed4bf10d89d911d35f9243cb3479125d7d397c76ccd151a75d84bc","sha512":"ba7cc86fcd39512977134872d0ce328f05467330e5088b877a92eff2955462ce1359109b21063491dbcfa009e4c34119982d3fa01e621d24c7fbe972b9391497","ssdeep":"768:lafb4pFxEiK/D5k8CYhkCVTd8Inf77Y/Hy0nXs5ING8fhd3:lafbOFm9klYhkyTd7yS6XXL3","tlshash":"d613f17128f2734a7dc58fe864f2f281888e415f92eb550bb1cf0b2a1151adceb524f6","first_seen":"2025-06-07T08:58:37.602953Z","last_seen":"2025-12-22T08:48:47.69792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/codmobile.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/codmobile.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5774\r\nlast-modified: Wed, 22 Nov 2023 01:32:47 GMT\r\npriority: u=4,i=?0\r\netag: \"655d5a3f-168e\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSOSIgNMHoDrC1VX41kBYg%2F0gkhh3OgXKWyRluhrBY1Osv22%2BfKtUcwKAjM45pT2t8VKQnVO6MhuhEK4Pe%2BlbIntCGXRWdYZfJIR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be37ad5568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f18a7612ec00d2ffc01e37e28081dfc","sha1":"ab26c3a0ebc07acb45b55c4385692890cc1db4c8","sha256":"01945b30a778e01375a4c103c555b6902a2a4fe4e7e2408cfd8660e2d8244ced","sha512":"7c6764f3468134793cd68807f5714084cdf8c3d0768dd7aee6c40d6b78d113d05a0155d113a1432a02768cc28ea02dff23a008d2494ffb9c24e2148201b54774","ssdeep":"96:LRKxwOpOXBN/a0LUcvny3stlKsXDP6In/n4tcJWKSkoonAqwjzeroebjL:NzOpOv/ZLTvy3stx6kn8c4KSpeierdb","tlshash":"36c18f3e9e2860d1f3a7543f460c3b96b74344031853842a5a97842baeb43b8db69624","first_seen":"2025-10-23T02:54:44.734812Z","last_seen":"2025-12-22T08:48:47.700136Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/autoclicker.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/autoclicker.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6400\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1900\"\r\nexpires: Sun, 20 Dec 2026 12:48:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gv9jEl19tL%2BwfYFTXmVXfmWBA8X6Hx%2F%2BFvhFySl2I%2B4uOcsECJVQ83zVD6XY2%2FFmfljafSe6pUYKeqdleT6%2FZWXpl1h%2Fyg6ALsKZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be37ad6568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ecc59a31f961da2a05c2755ad753e68","sha1":"f8d6db9da00814d0fcc81b543bf843604ecdcf5a","sha256":"07085bbaef82c22b2c95804da31cce4d2cf7724c5d0105e936ba94c242c106d3","sha512":"5549355f3b882cf75b88c0f7052c24f18970f608a665f439c81f4d2f560248a0d0920a2aefd0a33d2297c48ac847f825b288d1ff3b6fc01a2f74e8c68d6efb34","ssdeep":"96:GV6Elbw+i5IDWG5uTsZoeb3bfxlo5JLGQEk0sz42rK/Ojac/gIYBWSW:0fw4WctdLbfxa55CkXJ2/OPgfYSW","tlshash":"efd17e306e205edde5b2547c944b4f1337e0bf341526460bf818add585a97d8b0a5646","first_seen":"2025-10-23T02:54:44.660639Z","last_seen":"2025-12-22T08:48:47.700897Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/sameboy.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/sameboy.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5341\r\nlast-modified: Mon, 22 Jan 2024 00:08:06 GMT\r\npriority: u=4,i=?0\r\netag: \"65adb1e6-14dd\"\r\nexpires: Mon, 07 Dec 2026 20:12:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 1254956\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMb4oNW2WhFOBfoMHmcCo2Qxy7I5q%2FcAX7VAEw6uIiH2ZLPigKmIiLandOUFnz3G%2Bvd3uUQKW52BFJ%2F3UsU4A0bcRZa6kUoOYkcu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baec568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"772d27929c1d35c575948dbac5656a8b","sha1":"089e4e33f152ca9f72ea71df62d0e4427a323c57","sha256":"954f528a9cc338c1cbe5501279aef518c19b97809b8ba6ec01f8eb34895fafa3","sha512":"cfb4607d56755df475c484a010f687c7bd816f0dd7e378572b92a22f463da11b017bffbf40b0de5382d34456e13afea39866b2d38d527178764b410c21e8bd48","ssdeep":"96:7m2Mop/T4J+Zt5R7MuPBkRad3ZOd5H1QmXroCoCoay3fAM9VS:Hpr/RuuOSo5HJ9c4EVS","tlshash":"5eb12a6b7b21f792d2e8d2ba25f3224341098dc1e7446fe3d95bb8058c783000a9e78b","first_seen":"2025-12-22T08:48:47.701459Z","last_seen":"2025-12-22T08:48:47.701459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/vita3k.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/vita3k.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16923\r\nlast-modified: Sun, 21 Jan 2024 22:27:59 GMT\r\npriority: u=4,i=?0\r\netag: \"65ad9a6f-421b\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJ0rkgmJZSA%2BE68NDm62K69j8Kp1U4%2BOjuGVplFxZaoJCMDLJbXxP3vf3ppEL2VKlL0O9yW2tTBWXqCtiui95IyCZNrNO5AyWURW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eaff568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16923,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"67ac657dce4b953dc78fd70c56ff914e","sha1":"12ae7f3a98492416b54931f22ed4691861c2a0d7","sha256":"4d034955a8b54e7d3ae533e4f3e5edd2746423133f6dc44b1319a85c2b615d58","sha512":"09a07ff7669eb81733ccd7d84fd40c0af439801ce3a3b0f09abf7261ef421de0fce58175a6ce7457fc98f7d2658a369265d13341009d1cd3e648f056c55ebbc9","ssdeep":"384:RojR90fAsvq9DaiK1OZ5BVWec0CxGyVZvj0CBTavI01Ij:FfZSaiue5BDFWGUR0C9gbO","tlshash":"c772cf7dcfbfd193e09d6e32f0fa52131b12168290ac8525f44ac882adf631972119df","first_seen":"2025-12-22T08:48:47.703054Z","last_seen":"2025-12-22T08:48:47.703054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pocketchamps.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pocketchamps.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3548\r\nlast-modified: Wed, 29 Nov 2023 22:13:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6567b78b-ddc\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhAj7Q732lolSC9439KvU7N2LE82%2F%2FYb%2Bqh%2BGaujm%2BWYCFPecrvETRbHmzWZ6sJPPQTmI79pV6s9R1gzwTvZfvoeB%2BUODV6gCSVR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3daf7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b0bd11c28d0d449758631b6c2d7e04e","sha1":"fbe5d55dd7496fbf05185611097b533b9dd16928","sha256":"c09169f899e65c20ed38361255a681c39215e93c7a7f797780e082a5d5ab9c19","sha512":"1c6e2a92470a27f4a8339eaba0ab40e129f8ddd73f7a764504c3b7358252bd0686c087f80011fc578b3d357eaacc4b72f05cb81a9af64542ce4b6fb5f9853269","ssdeep":"","tlshash":"d1717dd164001b90fa6cc93eed7d1cfc00d2988745a78fe6cb4e44d33a892f64a11b21","first_seen":"2025-12-22T08:48:47.704613Z","last_seen":"2025-12-22T08:48:47.704613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/sumwarr.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/sumwarr.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7244\r\nlast-modified: Thu, 07 Sep 2023 04:13:51 GMT\r\npriority: u=4,i=?0\r\netag: \"64f94dff-1c4c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkiHhBZu6ncj%2BL8gpxFUdquXJGBZ5GDjzgmhkEEwq9TVtFy3Z45jCdfJB%2Boo1ymxaYuFw4VWr8iD76As7WXYxUZyLqKTOLJwRPud\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be43b12568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af0aad086fa468547fc6303814b6ee68","sha1":"b7b0f0de474ef20841b3a871ba62644af4dbb262","sha256":"d036292a3f48c23b89064fec3ebccb188fff5213353ce94cb971e8f61ee76e1c","sha512":"4a51b3e00871e67444fedff45edec58fcb0b8c9a7b4c8f35bda3548e1136eefa75812f9378070cf2a6e68384882e763ef6b2b020106fbca6c1f8b33882234a27","ssdeep":"192:XKf5XuxSC2J0QPs+tMkbakSYtzzkOLNj8jsI:XKf5wSCOPsUbekdLNjKB","tlshash":"21e1affc1161af31784420afde9a1c2260696c275c95f44e10da102de6de2f7f133aae","first_seen":"2025-12-22T08:48:47.705916Z","last_seen":"2025-12-22T08:48:47.705916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/coromon.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/coromon.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35854\r\nlast-modified: Wed, 15 Nov 2023 22:19:58 GMT\r\npriority: u=4,i=?0\r\netag: \"6555440e-8c0e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNaq6nuqL%2BkIPPdJctqOH%2Bm%2BlVOFmRhSLCXH22jSh0BcvVvW1idPfwRYF6LEOMigZuTmn2Mmyc%2BQixpubilMHV4Yk4rga4PKLcYz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be48b23568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6fc262619d99b707b531188f7827dbe","sha1":"fcba18b19c91435860c65b87941478c44a1d5853","sha256":"6d09810491639cfc596b78e49d5e85b19457857814c3bb27a13acc12617e1cee","sha512":"9d2eaf57c048b83f5ed526631b451fb97cef0d34666136834d38382f02aeeffbba40e9818afa4fcd99471df28ba574e322afbbc8a01f860813623d6c8e759db5","ssdeep":"768:4cG8O7GuaiE+I7Qbls11oIWFE7gjATwgnenpnl/bfKYdbk6ekmm:4cGx7mi9blCqPF0gjsIpn5jTk6e2","tlshash":"92f2f1e74aa55ff9c758dae8c606fb1fb5748c4f352299062e37e0f5a4300892ac1993","first_seen":"2025-12-22T08:48:47.707318Z","last_seen":"2025-12-22T08:48:47.707318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/trollstore.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/trollstore.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7094\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1bb6\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51JSW%2Fs7Da7zIWtqppp0OjuPw%2FevWYtGLWlzPTzWlNsw0dB3H12kS3qqdkzhpHSzom3wdiqaqOk3Nk28IjWb%2F9%2B4c3nyarTX2HR3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be59b42568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"72790b652c6af14cd33e004ea18e98bf","sha1":"3e990c1e43f40074089f3ab4bfb6fed31dc0e586","sha256":"75bba815a0796477043c10c7fcf3d1711b972f2edab0b4ec7a6d8768ff712a3a","sha512":"dd1dc9247d18871c70c49b4c7961751862e20f1d29b3aaa5c3465096cb7ec50edb42ddd7719fb545d3bc55117221fd5bc5942498523bc2ef5ff96bfb85e76448","ssdeep":"192:pfwa2+gdwecDnirLR5KznjuAmZyTxsawKBYQLcMBhKs:pfwNcTGCuAmQTxsAYqKs","tlshash":"4fe19ffb47cd4f68d1a397751cc8ff13aa0efe1a421c8a39e640a671464b19572b808d","first_seen":"2025-12-22T08:48:47.70894Z","last_seen":"2025-12-22T08:48:47.70894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/asaindragchamp.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/asaindragchamp.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12999\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-32c7\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5OE1RJ1Ffh0CBVjGxZzhWn%2B4CNuSkEJ%2FgvMnyYG5L%2FQT23vziBKkAaDCEpxtxb8QnBhchhTKaXXkicF2I%2Ffqu1q%2BAbkq2z%2F1NoW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be60b56568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"f3de4984f7b8010027045ffd41168097","sha1":"456c5e951efc36cd53e326a76980ba650420884f","sha256":"a359af548edef4dbc468b56fb191e924816d27db2432efba9640b0a890bb6fb3","sha512":"96059ebd853740406e406d72fa5d7affca3857eddc7adcfb035b377157fe6eb2c39f56f66e512ac3344a3a464523e6cb8ab6733fda1c09c934ab45e10568846a","ssdeep":"384:3kxb/6hpTGjZgASrXnxbkjN400QzqY3/gOOO:3kycgNXnxbqijgqY3P","tlshash":"d842b011732367c2e43cb4773ffd4e97bedaaca4f20625a2147d568254211b5cb690cb","first_seen":"2025-12-22T08:48:47.710316Z","last_seen":"2025-12-22T08:48:47.710316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/altstore.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/altstore.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2216\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-8a8\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tF5%2BpxWPnmuuQzdFB9qqtrTX4qLCocXkMM1ivUg2x4gFWnhoOuC34o3NnZvxSPZw0x%2FLVmKL1SUeuPZ%2FlkhBEi6KmKOkP7QbtHnj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6db7a568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e237fdc742e9db369c5fb9f8f023cb33","sha1":"d1f36cdcb08aee313c0d727c64942d1904c9a91d","sha256":"41fcd9b333985799b3963151f3e073a3848e307a65a25afdfd1e4329af50708d","sha512":"4009e4d6fe88671b9349aaf02b1cf2539cb393783d9acfc1544b51b90359571a2bdd2ea2d14b7d478befe0ab75f584202023655a59883ea9a7d3df3b48b9d7ed","ssdeep":"","tlshash":"7241087ad71c6b9ff1201d3a24a00f918369bc1b863646aeb05417637b6c1da06ed982","first_seen":"2025-10-23T02:54:44.656653Z","last_seen":"2025-12-22T08:48:47.711601Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/chaturbate.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/chaturbate.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4434\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1152\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3X7aeMsXbYrxERqHYbygB3XRBK5AlMlX8efmqgc3Qw0Un%2FtKGjzzOanyXkMDWzSMTpliiUdqwXR9Shq1sptGJygx0S%2B4yef%2FzNJE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b83568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"360b500693eeff28d452df5ea0b5fb6d","sha1":"a908094f03f0ba2a657999824f12237afc49fb08","sha256":"8cc4feb689af2fa2b61b617317228f1a1f88cb0153c8fda609250a03cde6b312","sha512":"0766b9f4efb1c2f4949f5eb7d455454f52274014f053b1c33755201b4b12868ca353a93b20e25c16b2df593f362bb9ba115dfd8f74b783d701aacde7abbe056d","ssdeep":"96:n6Elbw+icPIK1Z+GdZpZCiKOTwZHJAZLAc79:nfwA1Zr3RCH6ZLn","tlshash":"93915df213468363dae39ffcd5635fabb32f5939e113362ac2544113571904424fd569","first_seen":"2025-12-22T08:48:47.7123Z","last_seen":"2025-12-22T08:48:47.7123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/homescapes.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/homescapes.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22518\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-57f6\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlkgxCdjL7o6BVKZavY7%2BJ9eAHGVtJ%2BrWsqNbDQjBs3%2F%2B%2BssVXmIqA7w2K6IH3Iqy8EToHN0LZvN42dn5zuumeH029GogDFqHvDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7fbab568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f796b3250cd2c29fd29f07019e2a69bf","sha1":"63522704a750b895fa6dde327eb0f859101303ca","sha256":"500986f36cff2781d90b73dd422d8ef154c83b47e876d248649ddee22eb28307","sha512":"2c4dd1c8c792858cdc4a1f9f79868a7f3de40fe7de015cf45994c5eaf29dab48c01905afa4779d620bf674fc4cd45f09ba13eb3bcd80fc093ccf745b80c48af7","ssdeep":"384:3woh0WfiuvTqTedXoDuHxH3OlDJ1c8AJuzqHVQ8/L1xbO/80mjzT:gm/uy5guHx+lly8B+Fa00mz","tlshash":"79a2d073825f06d4de36cb740d5e1fdc1093a69e9e26110d38a09562e1b7a0cbae1cf7","first_seen":"2025-12-22T08:48:47.713642Z","last_seen":"2025-12-22T08:48:47.713642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/css/bootstrap.min.css","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\netag: \"26074-603f13f44e7ca\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdYcd3JOOcIkDzsIlNdeF1tMLH1kvr8ebtRdShkKeVmWa3Eg1Et%2F0290N7GCKMaqIiMzo5QAsqJUPPr2mjDEAdeLlS8h3z8Nh%2FO7\"}]}\r\ncf-ray: 9b1e5be33ac9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":155764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319), with CRLF line terminators","md5":"8fe70898895271ddc62823321011273a","sha1":"60f0159744e3b554a45da027f9e7faa992aed71a","sha256":"ae576713bc196098f7438dede6ff1f835a23291c32b745ad7e6fb6db809a719b","sha512":"a37d9f7728554bb6c241d68303e0f09bd427f061a681cf61bdddf1dda40a0c77c10e3e0bf8e58f1d31c1af14df7e5941c26ee53b065e35454ea8cdffb47392ee","ssdeep":"1536:M/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN264:M/Riz7G3q3SYiLENM6HN264","tlshash":"4ee396a6f5a0312de4a7c61964d0bafe156f8145d7220bfbf8273b7447892c70a63e4c","first_seen":"2023-04-05T03:29:14Z","last_seen":"2026-05-09T08:16:13.933856Z","times_seen":4268,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/imvu.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/imvu.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7034\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1b7a\"\r\nexpires: Mon, 07 Dec 2026 20:12:16 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 1254956\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiumAxsNwf8SlFuwwgEGzZiVzwTx5h0mG2bFUxrQOYyaI9l6NnWqwlHr%2BhX4LHIPV9idowYzCOd1h6pTm8n6si4DrblO0bntIFeY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be38ad7568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1097f918005eed9e1004349b14d207af","sha1":"2762fa6db85a06e461d57f56ebac5b45eac485bd","sha256":"74da67cadbe89f1e5797bc0aba440d3712e8cf22050f0e0dcf8927c1646318de","sha512":"487aab8f1d265b870a3cf46fe7abbd0a0fe4019a53f90577c69622f97ecabef82efc16490523ff628789230849258b4be9b44c6f739c70ece16a0e80756823ff","ssdeep":"192:tfwU/HBxq81fEUwB2juemd8E49lyWZ+tpC:tfwOTUB2juey8D9kiOpC","tlshash":"c1e1905d33354fc5f1509678c2113fef7b2c2d151c55875f921f4ad20a4aad18d98e98","first_seen":"2025-12-22T08:48:47.715552Z","last_seen":"2025-12-22T08:48:47.715552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/madfut24.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/madfut24.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5298\r\nlast-modified: Fri, 06 Oct 2023 00:54:44 GMT\r\npriority: u=4,i=?0\r\netag: \"651f5ad4-14b2\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YLA9CZY%2Fd6HgCBFRuTzRKlzqezZdtmKrAnrhnmQj1DK8RPyDjvGIGfpGZeOVeEhFnZSr6QF%2BMlUYZR3HHuOecnc3t1M%2F3E5uFgA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5298,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29f4c1ff5c354118086aa1dff1036e85","sha1":"a2cedbc3473aaab183143b1c3526ed3463f0b921","sha256":"622b48a84d80faed54a996f1270c161c823adbc028a3dd7c5defa59cf0f786ff","sha512":"31c4aa52caa741dd8cbaa8e31a2c67f565d77111707f1c67a993f4e4eca4c9c50dc81058893cb4987efb42b1fe1840a9e14e772b18e17c9bcf4535396c26a8df","ssdeep":"96:ajyP6WSF9aI2ty83LAUtCsW+NMdJtkUJZIYAamkGRKL/zFEMu4nM7w:Mysa9UFV+NeWSZf7Fv","tlshash":"f1b19eca50e0ec92a8a9de379156f45753cd96c373e11b0002f734f63a0216e60d407a","first_seen":"2025-12-22T08:48:47.716801Z","last_seen":"2025-12-22T08:48:47.716801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/minecraft.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/minecraft.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11117\r\nlast-modified: Tue, 26 Sep 2023 23:15:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6513662a-2b6d\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0B9GBCcXmgBIBWI1FPf6hlLEqfCUrIqDtzTSKDnW%2FKb5t1HRlBFXSZ62abNN8dBvbPr2c%2F2PfPsDu6mOIhTXM0DmnidUWx%2FGnrxY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be41b0c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"ae507f20ca8eee8338f81f9948d7860e","sha1":"63f27a12197fc471a4b97ea242423f74f106c3a9","sha256":"54e6881bb3418d4ce794fe5bfd063d15c82c9404ec4e96c3bed303f1ec470f68","sha512":"753c45152f3c04afe0537cdccbbf0b6c75d4c3417092fd70884767fefe9e983f3f3b0cb53b8ef78c3de542a69591d4ed755a7680edb66461794c932d217dd6c2","ssdeep":"192:wmlV/ps53C2fO/RNgKU2RhE5v0RQwd96Ka7y+2XphCAqPpjT5:TTXRN2pv0RTj6Ka7y+2XpsFp/5","tlshash":"9e32ce85f5829b02e649e874f9f88e9bc489a4d4b191d6b0f13ce6017e42773e64a6cc","first_seen":"2025-12-22T08:48:47.718296Z","last_seen":"2025-12-22T08:48:47.718296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/bleachbrave.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/bleachbrave.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8188\r\nlast-modified: Wed, 06 Sep 2023 03:35:20 GMT\r\npriority: u=4,i=?0\r\netag: \"64f7f378-1ffc\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8x1eiZFpFA97e9wSJrf67sbM%2BdmiNVaoLaqmLfloSADFYuHp%2BZ4BP1znHENa0FrtpdGmv%2FUQHqTGAVR71uXfn48pnimFPO23kaUl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be52b2d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8876bab45d2986217b651655d308f1b3","sha1":"f362a829f1dcb27a243ce509504d2b9d0ac244d7","sha256":"454f43c46b6016ab479e3823b1a0aa79526376769979536be19cb350d894e89d","sha512":"ecf9a046cb5f234bee7f56673f62d9d19a754b5366f25b2dc4b4d3023a2168ee06049f825d1ec2f7ec8372762fdd502263bae02a45c0b7682184feda2895b3ba","ssdeep":"192:KM2GuDafDUNrT0d9YN4Rfohd5RvV8HuVVvAw+4IrNTPp0q:QDaK0dS4f2RK8Aw+4Y1+q","tlshash":"d7f1bfe8ca84b625c23985338a7f2a1a04a6f85f96d78c4ef182d68d80995437d3d7d3","first_seen":"2025-12-22T08:48:47.719969Z","last_seen":"2025-12-22T08:48:47.719969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/fifasoccer.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/fifasoccer.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31967\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-7cdf\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqVQjRtqYzJBuy7LhNgUtWhDtgV5y3cFilnMtckdov5xreHlNilwT9kppwGt5Pn0x37TgAXPo%2BiPWiHv6dRNweCDkQ5vI5g%2BscZg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be5eb54568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3","md5":"0647b8fb11d823595f4e41c2f7e76193","sha1":"30f61226d2d7e5a1f2776ee4668042c891d3ef17","sha256":"93e38e5aa02a03d52a8fa5080d79c91c2a13c75ca26c5885882cd60203262db2","sha512":"7f391c1ee16e48fc5784567c03528994fea4cf60c9881785aeb8c33588ef2e889caa39f993b665795e14cec096b9c502f8952c3ad09936f18ff5af39323790e2","ssdeep":"768:kQw+trrE87DXZ9WBDVR3Q+3FrMMcU531FgSD5CWFvg:kStrrH7DgprMMD531VDQ/","tlshash":"91e2f11fc7e1a1eccc5c28b84be6a583ab0767749ed8715115348e88b9dd2b1de421e3","first_seen":"2025-12-22T08:48:47.721654Z","last_seen":"2025-12-22T08:48:47.721654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/stumbleguys.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/stumbleguys.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6710\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1a36\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTHWNw6zEmcioEj0%2F9lpxY1j6YJQEv%2BZzOx8svE%2BuuSnZNeVKgrorvhHOXV7hgnQX7ZxTSWOqU3bNNYi0bYN6vbrfFv5cPyLANV5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be62b5e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20a6a6dd22503b3192b15f728266b4b8","sha1":"6b1bcf221f5f8f29ba719404880dd0219562a8ef","sha256":"1cf37e9f624285857827c1708b8e9e21f6c0653a744f24d7c7e6dab313e3e0cb","sha512":"e774cb427276915210366a3a6890c5708b30964e8b2bfbe1364cd3e79ec42b62dda606c988c9821c3774b1925576d394fc4ee0f0a1667784fd52c861c0f57a65","ssdeep":"192:gNfwXuHj1b1o37ubtDwFdaK2aFDEKRzZvXL2uXjuN:gNfwXQjV1oqRDgdaVUoavoN","tlshash":"0fd1a031d7815acbf531dbf1b98c930882f0b94424fb2f09831256959f2846bed5c263","first_seen":"2025-12-22T08:48:47.723158Z","last_seen":"2025-12-22T08:48:47.723158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nfsnolimit.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nfsnolimit.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17582\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-44ae\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itWq%2FSE8dTYSrE08%2BjRH4psVj2yLQMeV%2FwKeveJwKE6jm8iYNxJ4I9S4cijG6yjpoDO%2FaUaHMrKu8o8%2FxEVCg%2Fjx%2F6jGQJtjWbvY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6ab71568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"43d6938060afa7866d269bc077cdf95d","sha1":"ee1c3ebb7c91633f0a8059bea8e7f9fda2b285f9","sha256":"2e4f1f28c029d47259704f845550be31fcf45df242cb08e03b73e6469f7ee841","sha512":"1aa2c82c9b7146ecb5e6194e80788d0e423c001953488945d969721051914e2c78e876608735a1939075f9228913a12e61ec80164772dee7722fb41ce8f01178","ssdeep":"384:3apL63LJPC2lpubC1ueO5D8fPZl35HRYYec0zDV/r/Za3p1LY:3apL63LJPCyAu1/HPZ5FeLVz/k1Y","tlshash":"a482e10b3d097a7bb2b3a6778d1d9f4225232e010f85c2d6240d996e379f67b051ef91","first_seen":"2025-12-22T08:48:47.724648Z","last_seen":"2025-12-22T08:48:47.724648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/css/magnific-popup.css","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\netag: \"1c86-603f13f44e3e2\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9k9R5nlW%2FZeTpe5wZOxeLGdA6%2BYZWFMpqY2aGtHqXQfOf0WoZFSktr3vxTNyGPFfloDqlA7F0Ni2BMFhF0ToUJi5Fzg16BOwDcy\"}]}\r\ncf-ray: 9b1e5be35acb568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-05-09T09:02:11.020958Z","times_seen":6691,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/subwaysurfersupdate.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/subwaysurfersupdate.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10318\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-284e\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EySazvc6ZdxicsdzGgiNmtnwxO%2B9RuS824kj7VylfL4Tf7kOTXkelOFPJTWwTpq2iadJLvWQWGDYWP0SYW97MksfmT0wMVPK4zAr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be36ad0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"370c9f26963971f1afb5945ef54d98b1","sha1":"e7628a2f6256d0750916d8557ccc7096ccaf4fb9","sha256":"143f9b9dbfa5f03af859552c742833dc449d7a7e0e5f77f462a1b506696e7f33","sha512":"8d9991f38e16d5fa0f03accd944d12bd0ab326f0b9dc4aaaf2bc27e596354bc576e974b9712132287f2fc41442fa9f41ef2c8fc3edd22258228b45a65cdda2e5","ssdeep":"192:OwdPBsHaZNcYz3Qi17gdg/bIKb7uUuyVTT1qyCRIAeBLlSf8yEJN/nwQX5AU:OwdoWBz51Emsk5VFTEyEELlGaJAU","tlshash":"9422bf13733a9b16e820bc331fe97374e3ec273926605636508cd959572d6cadab860f","first_seen":"2025-12-22T08:48:47.726988Z","last_seen":"2025-12-22T08:48:47.726988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/roblox.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/roblox.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2088\r\nlast-modified: Mon, 28 Aug 2023 21:49:59 GMT\r\npriority: u=4,i=?0\r\netag: \"64ed1687-828\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROtHMgrhJSxiAltgo9PjP8LKAHaILTWw3MMdTD3UpRdAxayKm%2Bz3ugSiIVFvjk3ojRLCD7ySQg%2Fb0Hf3CB1hnW2%2B7xfzr6UOSa3a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be39adb568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f88667892e7fd282f915304657fdac5","sha1":"a946f906db6a62fb23edeeea628707641a2c232a","sha256":"000cc73797fce288dac079af25cf4be79595cfd0ac723c047ed10355bf0670a1","sha512":"1938a8c448b705a620d2b5b99a6ebe556da9aa0ca84100398b1172abac00aa5407c54c8cdf27726545876485b3de34fd168a2e3992f39b27b237cfbf8aab0ee3","ssdeep":"","tlshash":"93413a2b11aea6efe4b160be830c258331eaf60547188972633427795b84217ea81f0c","first_seen":"2025-10-23T02:54:44.739707Z","last_seen":"2025-12-22T08:48:47.728554Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/reverse1999.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/reverse1999.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8706\r\nlast-modified: Wed, 01 Nov 2023 01:26:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6541a943-2202\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ek7ZgarBuzUDyN1cHLYxBebgI7%2BrSveM2hJR7WpCEF2fgbC7TFW8f9%2BqnIGR4zhnbPtOKSAwSeNhVrpJnQKeD3VZ3wA%2BJDdUSY3h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eb01568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08a27657d9602279a09e3a3231155902","sha1":"1814e488717c6ac6654b9511db115f04c956d5ca","sha256":"e7ebcd6da308f6e71a00bf8eff73f878274deb549685a3dea065836fbaaba2f4","sha512":"deaf36f8ce93db03ef6ce6a4fdfc6c9ed93786e8bf24a6a581655579ced96fd31494bf54738d34d867e39102dc8b16a90e0bfdda016d35e4aecfa8739083be2b","ssdeep":"192:MruymOMPuIh8mhctbAQMa7w2iSjuj9X1vgfn5:MrKh8aZa8KQXVgfn5","tlshash":"4a02b0954c92897e94df2cb77243217e9325431ec9a43ce64f426d84f4d91ed680a7cc","first_seen":"2025-12-22T08:48:47.729311Z","last_seen":"2025-12-22T08:48:47.729311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/episode.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/episode.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9956\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-26e4\"\r\nexpires: Sun, 13 Dec 2026 19:16:32 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j%2BdVyXS5bnbsOuWc6pwSTQrVtfE0b%2B0SP2bo05RjPULhnwKFSk7v2W9HSz7aWZbfN%2BPMMmEwOmARx27hDCxy3HxGo2tTvLbnChF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be4fb2b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06bcc27b7f8b2968e5e4d04c53b76868","sha1":"90071bf3f23a229c5e1ec9925a43c4e7f34e83ee","sha256":"fc4c192adcdcb05eb0f85438dd5d57d461fbe4f9630dfbe0f099ca80e0e2dee6","sha512":"2b286d76420a3e43bef7215f6a783f3800e3cdf27f2bdceadcc9a368d79cad28b7c39163bf53e40cd6ef10c7fa0af78b9b999b6b91887e73d1f2a5f2909197cf","ssdeep":"192:scE7WuNrDJ7wj7DT/7uw4yMTkFeB45eiFA0nWSTQBfdU34tw/adUv237VHy8:aZDVOT/f4yMVszFVnGI4tNdWwA8","tlshash":"7722bf04cf5c9bc5ccec21b5878f39badb0559b3cea85bb9c285850c17ea81b0d60b62","first_seen":"2025-12-22T08:48:47.731273Z","last_seen":"2025-12-22T08:48:47.731273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/onepiece.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/onepiece.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9570\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-2562\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueGohCDkuBgWBHSBcoIm%2B07XuEfJhUDyEmvA0pTGLvmE8aesb9izTaROfqVrVs3p5FB3pzV%2FTbjUKOIlhgu%2FHtUFsY%2FS12KFgv50\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be58b3c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9570,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0b18756b94b27d327256b0306a2991e","sha1":"a00a78231a0779ad221f19a34ed8e41b9e3a8977","sha256":"201a3f6559dd49712f4c08099c265174d99c3729bdc3a73c7d9e1640469ab7b1","sha512":"cad47a011d44e510b4373b1d4b4ba2bb3c6ff30b8cffcddb608563a1e4a656d881d6bf8ffb1c229a08f75dc83d5a5a506e11fd6ab5dc7182192f5578d1ecf1ce","ssdeep":"96:WeJP9xRvkivinOKJFvJfVhI0YYvs2Vf+Qy7G7crnJboTMSQUntxEv49y9HC5cIz/:WezhEHRfYYL9wzJ9U2vkVpRMYTdiYgNC","tlshash":"3912bf8a7da5828336ffe50732dc8c930ed5878994fc560ae251439ca0a375f183f2a9","first_seen":"2025-12-22T08:48:47.732817Z","last_seen":"2025-12-22T08:48:47.732817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/luckycrush.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/luckycrush.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2630\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-a46\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hd%2BVA5TP70LcmHVytfr7gHABIyPY1ub5LdlUz%2BVPUhvSj7kOE0SK9eCIcBl%2BQthFZJdZVEXa4kYG4WKgGmx9W86Bu7aTZFlADSj9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be67b6b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a1614ce9a861fd831eb3c7aadf60305","sha1":"e29c3d68bceb0a6e5a15f189525fdd72e87610a8","sha256":"b0e623803e5d345788d62a7f8ed5e923c7fa4fd573e8cd1d4807c379af23f2c4","sha512":"293069ab8a745951b6b44183a922aaac977a4665f1354da44e30ecd75a70b26463962f8f903e60347e591304055ac6c86d278a78291ea2b12f1aca252498f35a","ssdeep":"","tlshash":"6b511975f2d4031ae50419742467b74bb72c752b42a2ce7ec4d256121ba7cca38de0da","first_seen":"2025-12-22T08:48:47.734247Z","last_seen":"2025-12-22T08:48:47.734247Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/blockcallers.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/blockcallers.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7238\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1c46\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKVNjkiUTx4sPc9u4OxOS0Ujv8as1T4YXt8uGOsus7nm%2FTiURVHZWpCg9RRmuoRpYPpDR9sSEblxK3dJ43UMQ4XAkzsWbYoKRMFW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6bb74568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"64fc64dd1958c7ccc645bd5d48d805fc","sha1":"06436b848ab26beb9436a657f86640014df35f97","sha256":"584652f482296e8a0a1857e66b2d4c8bb223c44af8b804b3e8693ab84241cb97","sha512":"51cd6403e2d68164dbda76a07d9ed0b9eb9abd786d05bafcfb066583852518e7f9e49d52c1a1916cf3c0f466485b2c20e6f7b24c37fdd1da4a2ec21741163209","ssdeep":"192:Kbk4l7UO3Al+zSPfdaRmABmOb/1u8kW8Q9k:Kf9VOndUH/1Lpm","tlshash":"05e18e19da6a6b8dd57af6b010f7247a8a9d484679021c0be0bcd80f68702f5db525cf","first_seen":"2025-12-22T08:48:47.735649Z","last_seen":"2025-12-22T08:48:47.735649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/css/style.css","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\netag: \"321e-603f13f44ef9a\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cqCgheqwPn4ee6ko4yAaZA2XtRFHE6kNmvv7gUA%2BEsTovfJUdiwVUARiMZ6Ee2c8NN0qoucrma%2FSXQS8T6dClPCYeg9UyF3IMQcT\"}]}\r\ncf-ray: 9b1e5be35acc568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4f70f53a944ef9d91604075b2468c69d","sha1":"7e573ef6fd1d8fa6e295f361a7b1fc4a2b566576","sha256":"1e5d7f7cfa43339c5ed5861d6a1ed7e9f48ba4be6f61ef145f9681faad25782a","sha512":"6b3077cd243a50d0423616f0b6287511e8f3a2ac8c11ad3eab156806296c8c50ec0c40d550f6a93ff8b61a5a5028b11843a9b2b4f2484af9ac5875f0527b19a6","ssdeep":"384:nJFXiSTjFXjjDSa2t99Ek4WuqIos9BRqECNz9vR0Owlm+xq3N:JFXlvFXjjDSa2t99Ek4WuqIos9BRqEC7","tlshash":"6b428063af842405e007d66e6e8d7f51d37d0842ab0b4d7fb4a1242ceb8d1d453bea9d","first_seen":"2025-12-22T08:48:47.736946Z","last_seen":"2025-12-22T08:48:47.736946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/tocaunlocked.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/tocaunlocked.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8428\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-20ec\"\r\nexpires: Sun, 20 Dec 2026 12:48:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lsQ2yjLu%2BBgdnal3qR6pRYClKMkFGXEesoV7uYTZBUwRc9%2FEw6Wazoab1H8Oy3DZDwf0UCFKSZZvJJE3hlKqQz3Ra%2BAO9UORwUY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be38ad8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8428,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f05d45c31f4de01c6531d87a1d0b7aa","sha1":"e0ce95b41f8336550be6c9ec591fc65d3a67fbb4","sha256":"9448ce822e646735b76eed1076f0e806957e79acb5e58ae69f4357e63d99d0f3","sha512":"7999b3843893d723bdaaee4a433bcb430ed6ca4b5f261c5831c4d7db37d28a2a854fba6338054e81dcbf96edfa6f38f44d88fc0b13ce58aed999fa06acb904ae","ssdeep":"192:IfwaE51zX1rZIpkU22ya5Jld6MK0Cu5AUyiDyiL/7De:IfwaEPzXlZIpma5J/XK0zHyiWQe","tlshash":"3a028e2c1f6c0f9df049afb85298cdb9bbac1824b569a97002412363574f64d06decf6","first_seen":"2025-12-22T08:48:47.738284Z","last_seen":"2025-12-22T08:48:47.738284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nbainfinite.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nbainfinite.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6410\r\nlast-modified: Tue, 20 Feb 2024 02:14:20 GMT\r\npriority: u=4,i=?0\r\netag: \"65d40afc-190a\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pe%2BzYyXcQPH%2FTx%2FhyIEhy4U%2B0iSSCrGpJZbN4l3oeOllcrk5JrIqeIiQiRIN1ac8b%2BxW7Z3r9Mb%2Fg0R554hLnq%2FAcgp3%2Fa8jGPvk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3badf568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79e8ca8dc3094132eab213a61469b3fc","sha1":"ba09f216b0c47b0976282ec0d4b20dd274c21681","sha256":"55b3c01b168a1cbce52aaa8ed792ab65a7a43c32f4a0255cb961358aa0e36d50","sha512":"ef2c92fd52107df6346d5e4560c7fc2c3211160a2364c78d3fb4544f367c09750bcde4ec6e3f003e6941c600aa53916ca33e99b05701c7c3fc5de1c1e912aeab","ssdeep":"192:w1GWZvcxjaKqTI91ObjuYscRS43CGXsbEP6:aZAWKZUbnscRS6Hsbn","tlshash":"dad19fe60fb55e8e86be7877f016b93de7400ef564648d8a856c378a71840a06c33752","first_seen":"2025-12-22T08:48:47.739622Z","last_seen":"2025-12-22T08:48:47.739622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/efootball23.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/efootball23.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18429\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-47fd\"\r\nexpires: Sun, 20 Dec 2026 12:48:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158393\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oAAobrcz%2FBUHypSRNnoZNXIhUxeu263zQx0%2Ff3qFbPpbofSXSuV0TelcnljNU3SVpvYbaO322fFZi3kqixUDQXNXy0510lg8QL1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3bae1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18429,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"4bca1e37d6ff39baa52bd2c9d2b2f936","sha1":"f628dbefdc167831db59d5c37a66f07fdb975c7e","sha256":"9323fb3203269a8b641012a71440574b03712f7a7293063be6f01f1b52c3bba0","sha512":"f613c98e78bcd52468afc4f07b13b5b2820faacca47d7eea15e9546fc23038064428942d13302928ff7ba0117317fc6a64276751958d9357c6f33c55f3d0eace","ssdeep":"384:07XnFcQFlU5SgRQFZMwhqdWMn2v8OHMTfAM6uBdK+l/aVkqmwz9aeoLbl:07yQfU5RGnGJn27H6D6ut/a2Fwzkeo3l","tlshash":"e182d14c8d10c1578993bcbbfd7824bad42b6050feb0ce8de835c5caae64b950a512ed","first_seen":"2025-12-22T08:48:47.74108Z","last_seen":"2025-12-22T08:48:47.74108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/revelationm.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/revelationm.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6548\r\nlast-modified: Wed, 13 Dec 2023 23:16:01 GMT\r\npriority: u=4,i=?0\r\netag: \"657a3b31-1994\"\r\nexpires: Sun, 20 Dec 2026 12:48:20 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ux1YMvtmgBqDYdUYNDxjMilANCRN1wG0W7wg%2Bm2%2F5Wa%2BFRtv%2B5kgF%2Fyb6kLCh7bMAUy%2FHtCni8%2BhSP8Z7sh4kLECXCiwksC5a%2BAd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3baeb568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a3ec6f3aa5cfe25a1cdb016a7f732f3","sha1":"db6987bad2381ccd1bc87fb46766e81b4e3d932a","sha256":"b5f56c5b3c1a368235d4f2bc87b3d39f3bc09b5ca199f6f4f2f0231d79d23e0b","sha512":"fd20f1b3bc74b035babbbcfca05fcd06e039ff3a9e12e50de3cba510f14e10290fc9d15976c67705d21d9d51df991a9bafd83a408df0f8a360b36a654e6d3ae9","ssdeep":"192:jHMrQBwwc9N1KyHreP50inrVJ13XoP8xfw:DXCwcVKgreP50Q/X28dw","tlshash":"46d1af9d41fc4c7bfe85c4f5099a2a087781e9c056d5001a315ec38de6e5145f9bd52e","first_seen":"2025-12-22T08:48:47.742963Z","last_seen":"2025-12-22T08:48:47.742963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gachalife2.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gachalife2.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7378\r\nlast-modified: Wed, 11 Oct 2023 22:41:03 GMT\r\npriority: u=4,i=?0\r\netag: \"6527247f-1cd2\"\r\nexpires: Sun, 13 Dec 2026 19:16:31 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 739901\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sA9%2BSuS3%2Fn1jYF6j%2F3NBtGpo3UQvCgG7SqGoH2orbopJ%2FtVUQ%2BQ1yUjsBTLAW3ik%2FnLY79hsaTr3LqohTv3GRNkLGny6YKzmOJ57\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3daf9568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fba99c08a964bc829766b24e149aebc2","sha1":"290eb9529011b62912255a2e16e34c92362d370a","sha256":"b0a3ff4692012a0dfb0d1b42da94d44c4cb00a71bf5f87ebe42cde5476473634","sha512":"3b95ed3b0838f01c6a74c128d042de97a31da7adc5839ff6e668b368d84aa297b0b58f2fbe347ab175aafff7607a53aed52aa7aa8551268960075eec1f7c78d2","ssdeep":"96:lTZnQRF6B1e6LThvfRs8wcWeN8fhNgb51gJTW/L+BRcEzi5VyWnMS89:VFnBI8gu8fhNoYT+M3zi5VyWnA9","tlshash":"1fe18d7819505c60ccaeeafe55d65d5718723daf8057eae53ba286725a12006e0cffc0","first_seen":"2025-12-22T08:48:47.744248Z","last_seen":"2025-12-22T08:48:47.744248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pokemonunbound2.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pokemonunbound2.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25417\r\nlast-modified: Wed, 15 Nov 2023 01:51:16 GMT\r\npriority: u=4,i=?0\r\netag: \"65542414-6349\"\r\nexpires: Mon, 07 Dec 2026 20:12:17 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 1254956\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aikmEim85UFBNwbdCRLxOM7uQM7nkygR1Oiji9IHodK%2F7d%2FvEmrWiPgTwjXV9%2BzzSBrfwlN7HnRWQfcEXvdeAIYPRv98Tdt1JZSD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eb00568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"864ff6f3f1051d3194c28fcf8db017f2","sha1":"250e2edbb774fa38b1e9b474547e6c5b32673e90","sha256":"0fa325089cdef231e5d9b05102fbfc7bc29f7b9a7ad836b5eacff0f9fe9035cb","sha512":"8b1c89cb54f566bfcb30d09a6097a63e401d409963d2b877538616688c913c5187d34b99ef432167faea91f94102f6bcc69bb36627b7f5e17dffe53781875f82","ssdeep":"768:A8rHa87ky0nO6e3z918sijYEpQAyxRhAsvoIbH7lH6zMjAEGZ:zrHa+kEbj918djYEpQAyxRG8NbH7N6N","tlshash":"e1b2e1a5f2792f5bfb0497220ef3486fb32d119a8ed8d44b6130885f98812f6b4165ec","first_seen":"2025-12-22T08:48:47.74617Z","last_seen":"2025-12-22T08:48:47.74617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/powerslap.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/powerslap.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7756\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1e4c\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8svEryEeb9BAX4xHn2hBBzWigBDFHibJhqykOXbqb5wTiSA8KZ%2BP7BXJU%2FJMVuA3LaqJfPvk1TZgIelw4OtOAbqqZ7PEK%2F3Tz19\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be45b1b568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7756,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c18bf3dfabb4cf075613ffecfecd5816","sha1":"e9154d2498fc433ff1d45884179fe61cec82d797","sha256":"7b3f53dde7372b740c12f3eb0f5a2a1d7e30467f5eaca33aeeb50510dc228af5","sha512":"255561f5dc2ea1ccb5ef1fcfe5eb782730bcbb449a1c62c90eeacc5099d33fd1abf979dd13e8fc896d0ca9923bdc1e0377f6c09e3a5d347b6f3eeb28acd0addf","ssdeep":"192:8K9KrmYhOEQcTkLtz6uwRjVv08v6As+3TwMHWhUsSd:va3hOBzgnMOxYUsI","tlshash":"acf1becc4bae5598df892cfd46ed9e09b530a33249e08312b374f486f26616dda120b6","first_seen":"2025-12-22T08:48:47.747647Z","last_seen":"2025-12-22T08:48:47.747647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/photos.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/photos.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2920\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-b68\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxUqQbyr1y99JZ19zLFG3MblG4Py2ZwGXvmO1znGT8Qpvo6IPYQuhD5wGwwTo4G86slXA%2BgQnF7UOx9JwNyavWKTSRkZV5z88Odx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be36ad1568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3d8c08801aaa1a04a90d64026744bc0","sha1":"e693db22724d008ceec61bafeab43146affe4b81","sha256":"9770ac1a9ae84dfafeffdadfd7de02e0f4927422126b76e9bbd0baf718986953","sha512":"63282ba8ec9c2653c7f9beccaaa64e4997094c428776a24d662d1aa0bf358725d7e33a6b88605a4d63849d787cd3bd698156d35239f89c3bb172af5880a39ca6","ssdeep":"","tlshash":"8b511c21d3d65585f4279fb8b095de876338bd70519baa26cb1003071b0dcec644ea5f","first_seen":"2025-10-23T02:54:45.199489Z","last_seen":"2025-12-22T08:48:47.749149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/wizzap.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/wizzap.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2998\r\nlast-modified: Wed, 17 Jan 2024 23:30:59 GMT\r\npriority: u=4,i=?0\r\netag: \"65a86333-bb6\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2E57i2L7UXHit8tgueKyxmULzuCtIAHk4MB6gWsDRPEz4ZivNi04pWnF1%2BESFxBsYSB2G%2FuAE%2FDIrxjg7PDZovJycqDeRCw26Tf4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3daf8568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca22b19169e3d56c2b8b24a0f0462509","sha1":"01e5f74b7a955cad1f71002679840ca016649797","sha256":"3a44c6ec76416cb4f1001edf64c1c22b9df6a480be8f42023c8ec83e607e1827","sha512":"1dcdc62fa814c5202b560613b37b05d8d35da35fbf866de0f10cf9060deef6d58af861ae15f37e580aa393cee085753bee50ab10343bd0f5bc3c825dba6f9b62","ssdeep":"","tlshash":"80516d22397f3884f23c453d08eaf767a408dac2f6b424983a583a71ed879344f435ad","first_seen":"2025-12-22T08:48:47.74981Z","last_seen":"2025-12-22T08:48:47.74981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/dungeonhunter6.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/dungeonhunter6.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8782\r\nlast-modified: Mon, 16 Oct 2023 04:45:57 GMT\r\npriority: u=4,i=?0\r\netag: \"652cc005-224e\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4SrK0ohInx5QPp9UcElMLhCUM75hUfaqPbhW8UUATFV7niAe8DraSCNRIHSrgfRNE56miNvr98rLC8a8RrCTbxs%2FNNcC%2FkrwSr9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be3eb02568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af7302aece1ce8bd6bd01ba7dba5a577","sha1":"e937fa456f6f68da59aa2850346862f7091cafe8","sha256":"539cd03addf9ffd017264d54d30482ed14a2886fce20f129a19ed7ff5ba56210","sha512":"88bacca3c761cb9d83cce123f4b7ffa01b07ed4700996341a24da04073e96807c38b126f77d8ed023697811de5a850537bd7d4afd74e8a931530d24fa9abd752","ssdeep":"192:CnK/s7al2xuzYbRzY4WXD8TPELclwqOD+N29nDy8:CnU/l2xukVzYP8ALcnODGEDB","tlshash":"24029e3e05734e4950d79b79b208193dbbe1688af536128d39c27a3f70ba0da53874e8","first_seen":"2025-12-22T08:48:47.751141Z","last_seen":"2025-12-22T08:48:47.751141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/duolingo.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/duolingo.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2278\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-8e6\"\r\nexpires: Tue, 22 Dec 2026 08:48:14 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbSsD7APstecSiINwE%2BLZYDsguhJhQk2FpZSk32vF1FR7DbJTFDTEnhJvr%2BwozPKoaFd7XIPjhiVCNcx8phS7BVjuIEQiZ%2FIbFfm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be53b34568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a30878a8bf59b0785092b41bf658e58","sha1":"25e93d8d524735f15ecb714943ce351c359cfe05","sha256":"20dab0ddea07e9b6acc359aa7d4b6df202ee337bb0b0013f86c0696325020034","sha512":"3fde6e1e7adb798192a96ed182f1629e388295c419c9159bd6ac11b610cb6653b5f46b6341f8e370b33b56d27b7c60b0a1656d5dce44dacc342f807a7c4ebde8","ssdeep":"","tlshash":"8e414bb10ca8d569f8a0197525857d06f7ca4d23af616973392582e0b247bede928300","first_seen":"2025-12-22T08:48:47.752518Z","last_seen":"2025-12-22T08:48:47.752518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/nba2k.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/nba2k.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7182\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1c0e\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YOxzHdf7RA%2FzLvptSymrlQe9bJ1tAdRElEFyA4eTj%2F4oFchQSCxyJC0fvNqIQmkEgyTRTPff7%2Bwe9nMhlBCEfQ6R8X2wGZ4UP9d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be59b3f568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b46056e98c55a91d52c101d50fa71ecb","sha1":"5b02aca5d0d8ecea9220d59c832bfc1393848f2b","sha256":"b59a800c69307a2e2d0119b905d0381b1a17ffa7e6fd1fc3450f4fb3347aa7d3","sha512":"5ca754c9a5f905d63c5eda202d90b8c7e9a10f596971fec63d17d4b72d627bc5815376b9762d8b85e7bc690e1b85b88fdc161a04d85104db7893eff0a39781c3","ssdeep":"192:LnKP1ADpRa6E5GP8IFtRF25fx529sHugKm:LKP1kYT5WFB67ys8m","tlshash":"50e190044ff53c24c323713576551490e2281d9e019ea5682b7b98f9ec145f4fb865bd","first_seen":"2025-12-22T08:48:47.753843Z","last_seen":"2025-12-22T08:48:47.753843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gachanox.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gachanox.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5854\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-16de\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TdMar8%2BCDHsthJaMHcbtbMzxN6yIHcNKx3ANk%2BkOs4IA4IB9Ry4YqMYiTxJgR2bxIjwaK2qG7YHbu9YEHAj7kR3%2Bjxu%2B9GuYHwO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be64b64568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b5fcbd8a2b34360e68113252f277056","sha1":"2d7b4e379ddb1c0feedadc1ac07b7ea010d1c73f","sha256":"f4d05c34ab86b1e5efb2029203f29b571c297c37d0ec263888f2a45c28d5b7cb","sha512":"223587a5042a7cba6c949c7082894912f5c411296adddc6d1f78cec96a35fe0f8ac224e657a8c0b8578440676238f508aa93cd244166b6567e41ab777b53fc2c","ssdeep":"96:A6Elbw+iG1XQAPbFVN4n0LDvjB60RuhJ86FqpCyYEXmwiKXce5o84lCdMMvC+WQs:AfwgAI7G0N60RwJ86FqpClEziUcehhdY","tlshash":"bcc1ae3446b08f29f1085ebc499821f1e5147f0383acc16d85cf26b4dc392db897acc1","first_seen":"2025-12-22T08:48:47.755315Z","last_seen":"2025-12-22T08:48:47.755315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/pojavlauncher.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/pojavlauncher.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5758\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-167e\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCBkjP8lrIIStSH7YJ68lBPxk72QF%2BOc9wJd2YcsvmRxwIWjiqXE9pS0QWC%2BXU9yWX2R1kjDQqvQBwCEJexGd9W8mwPuiKu0q46c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6bb73568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13ba24310f637ab74aee0f327ee0dc34","sha1":"44f8f57fd7996f00f053d3e6d37ac778db95bb38","sha256":"9e675362be402924ba25b045b40cb70a1b59e5215a3ba9bde3b4a6cf922602b1","sha512":"5a43b73b225cb1d9a0227f7df41f7328f644217f7be6298f776ef649865e9b49e06a625eb079816ef424df4edb18f9eee51ad3de73c868603bade99969fe4038","ssdeep":"96:g6Elbw+iZWzUMCbTe8Z2+M/3UY3dFsJ1VUl1Q2LoHPVw0od4OcIFAUGnPs:gfwszZu929h3sJclAVw07vnPs","tlshash":"d4c19e2db6a0aa2af202c7701c471302eb58f85e8e86d30ddf417b2f2e20547997d1f2","first_seen":"2025-12-22T08:48:47.756601Z","last_seen":"2025-12-22T08:48:47.756601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/screentimebypass.jpg","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/screentimebypass.jpg HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5733\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-1665\"\r\nexpires: Fri, 18 Dec 2026 18:10:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wR1elbE7pfHigohPab4RHNr22Xk6xY7UbWBp7IuAJ%2F9bndf2VIXBHUBRwLF6brXH7SSdibrN0cddirVzbMyh2dQ%2B%2FFvjsN7g8P6i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be6cb79568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5733,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"6a8007d41f84bf24711a9161277b66f6","sha1":"af4a6d320913aebaf3b665064162d7e60c833559","sha256":"4bfbe72fb37e953a3b7c73224a7cb3ffd18ff43a6746e17452bdf2af546e07a1","sha512":"161e3d1915d8fec67e2b029909ecefb5b0e842ad3e88f9bc6ee9e08f934ae636461297c626b2e46f07228c2b217ab79673f68f31a6a4303f43cc0a1e700a19bf","ssdeep":"96:EdUH8OQCBaqUQpbCgQ2Z4rKe60VxqT0kFx4Wu+3DD8rIt6FJPwQ:yU2eaqUQplbZ4rzdmdFxTj3DArItAPn","tlshash":"cac15b93f850fb43e425b43d1abe982b595a24f07eb4d864f4beec4667d80e3099e049","first_seen":"2025-12-22T08:48:47.758022Z","last_seen":"2025-12-22T08:48:47.758022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/reelshort.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:13.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/reelshort.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2736\r\nlast-modified: Sun, 12 Nov 2023 23:45:03 GMT\r\npriority: u=4,i=?0\r\netag: \"6551637f-ab0\"\r\nexpires: Sun, 20 Dec 2026 12:48:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158394\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BeWaI%2F5yR%2BACBMuaflOXrjdRudqg5rl3nwlkxU2Walqa96u%2FKxyc7Gy2CUyPW38S%2B5M27qnryGiVmnHuXMYsCoTmFJMPJdhECp3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be37ad2568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbed0ed0f5d43dae05846a1ab35369b1","sha1":"c8d46673fb83c6302f2d966e15418757d9017e70","sha256":"915c8b97cb2a3241aa822d756444d5307f33a97add2c907cc12dcc660d7b574a","sha512":"67d52f1ab06f62703aafd15e71d07e010a972c37785880a0287538ecaf2e4436af16c9cb8cca3502f45def76d98066d995d1215b959b4ec36764b0d7c0bc1a00","ssdeep":"","tlshash":"ec513c95efd889c75a947e74282bcae4d871cf501609af079003176aed7844e9f18d35","first_seen":"2025-10-23T02:54:45.754911Z","last_seen":"2025-12-22T08:48:47.759273Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/inds.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/inds.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1514\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-5ea\"\r\nexpires: Sun, 20 Dec 2026 12:48:21 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 158392\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBfKurQveXeJIjEzZqUtqDBS2WICgzmI8wGAAZa7gRkMH6yZM3r6aF%2BEe8qrkB9%2BjMqBXhSDRZbuVS9aQY6f7DD754J4DsuBBp%2Ba\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be70b87568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da7d0333543e73443cb1d958c05935e0","sha1":"4af79e5dac25978615e22b5aa0c25e47c4d07c39","sha256":"136253f9314090faf9cb239cf903f164764e64fd261495dcb5128e9ee7d65fcd","sha512":"6f003d59061e5e79251e643bda1705d88975e85d3d11ff1b76754f1703282a11fb2b79ae59d0554087d34974d2bab46abdf98162e58909167798d5ee1996fc47","ssdeep":"","tlshash":"a131d86cb3e5178df9c20678a0b72bc5c7a0fc07378b925901cd49210b4d2ca396c2ba","first_seen":"2025-12-22T08:48:47.759925Z","last_seen":"2025-12-22T08:48:47.759925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/harrypotter.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/harrypotter.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19192\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-4af8\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjspsDRDWNPLrTb7YfZD%2BuTehKvjbZwyUm%2FQhUwGi7AxB8j%2F9j3Qv76lhusGZ7P7ogtOAN%2BHnO%2BBpWteXzYck2OovvT3n9bbcG00\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be81bb4568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"43fa0532c016e72da184422e19e855de","sha1":"1649be236d0d9690351430e34bde0ce345faec15","sha256":"2fc93c07b110ae7c721edd91aefea3d12a7f82c8bbee3332ab079299a841cc63","sha512":"ce563484dcef8a2fd92db082c5a08d91fa253b97139544e3b528ef118c58009025224cb1e15d85cba64038ef3274b4b6005a7e81ee1190bc71d114dc9213071f","ssdeep":"384:wwFSI6GuFb0Mff+cqyz7KqDVwCdpL+KULtoYGiuFmUl3et:lh6vb02L7KqamL+KLXkUl3O","tlshash":"1e82e10b0a7d1a58ce15cc747a059522d68a1b763d8f307bf46f2736b629de07a08d0f","first_seen":"2025-12-22T08:48:47.761205Z","last_seen":"2025-12-22T08:48:47.761205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ezyplugin.com/img/gachanebula.webp","fqdn":"ezyplugin.com","domain":"ezyplugin.com","tld":"com"},"ip":{"addr":"104.21.59.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ezyplugin.com/","date":"2025-12-22T08:48:14.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ezyplugin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 16:43:58 GMT","end":"Sun, 01 Mar 2026 17:42:39 GMT"},"fingerprint":{"sha1":"5A:7C:C3:5F:9E:ED:45:BB:09:39:7C:9B:92:AD:0A:3E:C7:1C:69:B5","sha256":"4F:45:E9:73:17:F1:06:2F:A7:EC:00:3E:B2:DF:53:09:AE:DB:1C:3E:D8:7E:AF:37:1C:96:34:20:AA:06:DE:28"}}},"request":{"raw":"GET /img/gachanebula.webp HTTP/1.1\r\nHost: ezyplugin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ezyplugin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Dec 2025 08:48:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2988\r\nlast-modified: Mon, 28 Aug 2023 01:02:23 GMT\r\npriority: u=4,i=?0\r\netag: \"64ebf21f-bac\"\r\nexpires: Fri, 18 Dec 2026 18:10:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nage: 311874\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eqmo5O31zf1kV3nmN5vprbnzPIjLNA5G5M9J9mO%2BnU19x%2B%2B459j6%2Fo9My%2FTFMPLsoHF3aDDswXhRrrYU5RLB%2FY9DRcvFYrE%2Ba9V2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b1e5be7bb9e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac606798d46bb40f55e73bc3c8101aac","sha1":"f5475fedbb8289c989778f8f7a0a092959c12af5","sha256":"01917883956a4140ad05454de2f1f322ecb58df730b23a7f24288794ab10b1b8","sha512":"70e65052c20dfb444fea8e45f76046d489efa0ffb03fa0bd41a060b5c23beba2bcada27692ae85fef87b2a78e43649f608f65ee4fdb854bafdc417ea19524f2a","ssdeep":"","tlshash":"95512a39f3da731fe1986e7c06ce3bc1276a6d0015071b6ae344493227897e478c99c7","first_seen":"2025-12-22T08:48:47.762921Z","last_seen":"2025-12-22T08:48:47.762921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"ezyplugin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}