{"report_id":"f49681c6-ae81-4115-85a1-e113ce67f6ca","version":0,"status":"done","tags":[],"date":"2026-06-27T16:09:38Z","url":{"schema":"http","addr":"mango-cleopatrapg.com","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"104.21.32.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"title":"mango-cleopatrapg.com/","dom":{"size":5401,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9e741013d78cdd3d7de132d24612b1fb","sha1":"7ea503a6d1a05229b91bef84c05d189c755c1ba9","sha256":"ad38b5fb55732e1934a755dd779b639321ab5aa36e586e67c8383a74dd3e4190","sha512":"bb94f15c36ea9250d22802f96c54ddea7b45de1aad8de42675c60afa606cd48e1460f2712cf321636763bfd6bb8631c6a2fec27ef12649097a4896b433c83442","ssdeep":"96:n5uFJe6Ksyk42qNpy4+OSfOYso74qX9woGJ:QJzyrNl+O2GoUqX9woGJ","tlshash":"53b1109b05f322091133d1289b97f1087933905f210ac94a7d9c67906fd4bab96e7fde","dom_hash":"domhash9a9e6fe57e9fd68f595c9c7f2ffb3008","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mango-cleopatrapg.com","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"104.21.32.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-01T16:09:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mango-cleopatrapg.com","ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-05","domain_rank":0,"first_seen":"2026-06-27T16:09:43.109024Z","last_seen":"2026-06-27T16:09:43.109024Z","alert_count":134,"request_count":67,"received_data":14014517,"sent_data":35411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"company-fj.s3.ap-east-1.amazonaws.com","ip":{"addr":"3.5.239.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":2035816,"first_seen":"2023-04-01T16:23:48Z","last_seen":"2026-06-25T09:30:30.53028Z","alert_count":0,"request_count":1,"received_data":87040,"sent_data":627,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"server.mango-cleopatrapg.com","ip":{"addr":"104.21.32.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-05","domain_rank":0,"first_seen":"2026-06-27T16:09:43.110738Z","last_seen":"2026-06-27T16:09:43.110738Z","alert_count":0,"request_count":1,"received_data":818,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-21T22:30:18.963204Z","alert_count":0,"request_count":1,"received_data":324749,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/manifest.e61513f66dddc6ef7155.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40dcfff9d09d402daf38b8a86518deeb","sha1":"52f6686ddfa8a8d89f384d69974fbb5e2ba81a28","sha256":"1a8162403bfffd36e97c3d0d2f07f8bdc2fc5e65b6638b0d8d951c58e7f95327","sha512":"475fa72942be0807dc7254399a7cb17a21837f7f6f4bb8f66998347683ba0a9058ca8de756b8d0e94c955b3c9284535baaa271d373dabb8387edd9190780439b","ssdeep":"","tlshash":"a1011ed737a2fcc21362287c093f5089f2796914062eb881c749a06a3d7109680a9fd6","size":799,"data":"","first_seen":"2023-03-07T01:10:47Z","last_seen":"2026-06-27T16:09:51.83977Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MVVVQ6MF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8c92e52bfb8ce4cfc13675283e630c7","sha1":"3baeda27c5f314d283ba82350d22058e8ce45af6","sha256":"92342089fe74c9e8590a5eccb77e81dacfbb0b072fd02496061c319cf69c08d7","sha512":"24c530b27c4a5f952c397ff6a11add57369993b2222d32467c76249171c69a2dda170936939bb2abc25e47ae35bffcb2ae1b37fc2d13bf8682c211865f207632","ssdeep":"6144:Vfmk0EU4tdNbyX0ka/A/ge1CWMHc5n+Q/w:Visk86fI","tlshash":"8c64f8cdb3d6746283a3a478503f014ba23a79d2f84cc898f186d8d46e746698277f7d","size":324099,"data":"","first_seen":"2026-06-27T16:09:51.715477Z","last_seen":"2026-06-27T16:09:51.715477Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72c15d027231ce4a1c74118206e947aa","sha1":"6c1f578fb595efd627d763a7c3cb16a49eefa9a2","sha256":"7bc4eaddece3381f181e3d9975c7b06a0bcf180d009bba024de1f0a5f06d6df3","sha512":"70d4ae4e104c4cbd1d7544de47ee353568ff59ae465c582e63d4c924e31886e590ec779336543520ee512a681f64d0bbe5dbb3d6c4a29d460ff8a6efe76a0933","ssdeep":"","tlshash":"1f01b42b62b551f0517ff37ca76fa740653200d7a0089e007d1d5f806f206384790a8d","size":689,"data":"","first_seen":"2025-05-31T21:09:49.921748Z","last_seen":"2026-06-27T16:09:51.841931Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2665a3e9760d8cb3e825b53fdaa4c222","sha1":"d4d32266c241e915705dc30a1d20c32f09fec05b","sha256":"23be924187f30d9d998a543d67cf13321ea56df2451b4a6ceccc3669e9acfcef","sha512":"02a33d583cdc9200fd2a684dc13da82f67e7d8edf25413e0a34f01168ee570ebf3396b2bac9c805d5ec5c955477f036882ea8df4cfcd4a600003dbdfb0edf7b8","ssdeep":"","tlshash":"f101594a14b770382aba30fb2baf1159355514172840ed54bd8dc2646f14fa98a7a6cc","size":674,"data":"","first_seen":"2025-03-14T05:32:35.571352Z","last_seen":"2026-06-27T16:09:51.852745Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"847d0011ea4ed07099aed9f0ae9cd848","sha1":"0db39a206c8cb46b7c6aa72bdb0bedb0ed76c170","sha256":"f58a935d783537ed037341b3c70d9d8fd9a10fafeb98471b6ec06f63b3cd376d","sha512":"4c425826708a58c2a747733a0e4e96f26d4b4730678fcb6eb521c5b933da8d6ec107066457e489acea6afff6da5713328bb99be4cc2af5e9f2747bab58eff820","ssdeep":"","tlshash":"d561e11e0de3b554317370bd9baf92547127106b2495c5093ecc9e006fa067e9baafc9","size":3226,"data":"","first_seen":"2025-03-14T05:32:35.572593Z","last_seen":"2026-06-27T16:09:51.853684Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"976ca226ba6fd886ea98106c1f2285ae","sha1":"c7202279c5908ba8042bed90212fea950e71e863","sha256":"d981cfcc9bafb07c0949e5a9caa6911052157f13e8c6efd4bb223d89a0a025d7","sha512":"32071cd68bae248bfbd04af8f792ab1572e2445c47c59efbd7ed40fa17877518300f7276233c96fe82fcca544bd1052931bcfac6faced5d302dded9416ca00ba","ssdeep":"","tlshash":"3d51425a35e8b7288217b0a4994fcd48f630042a11e8e4458b4cc9f6ec3897dafa8cdd","size":2666,"data":"","first_seen":"2025-03-14T05:32:35.574917Z","last_seen":"2026-06-27T16:09:51.854233Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c0c9148219e1d81665171f12fc19633","sha1":"3912906f02816b257d35abbd9b69cacbe9e736ac","sha256":"2a48e2e7a837a11d6721adcb7ead5656766098ae620ea6607d434b57dae2c0c7","sha512":"01b6a972bcafc5ff58efbf13505ef4eacd11bc955f4379c5ea33bf9c19e200b23ea14e14091138cd22232c6876bf56c01674cdcd3342caf4b702b02b9a1b3885","ssdeep":"","tlshash":"f8d0129ce0613f0211f23078bd4611b21991366f5f149138794c4d0c2fd41277133589","size":227,"data":"","first_seen":"2025-03-14T05:32:35.57562Z","last_seen":"2026-06-27T16:09:51.854878Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3085a758bb994f2b512ee8f1eeac8707","sha1":"8a30a1d944eeb315bd79e90c60e4beca717faf2d","sha256":"a2dba0967ec34c8155d48970567f7e4fe97fa976e86c92ad0173dbd27b591932","sha512":"0edccf0eea112dd764ddf32c3193eff58d8ff39f608f7a91734a023f81a45a84b55dba2526400802c82c5ce69de0ca2bd8c63243462a15e0413446a77fae407c","ssdeep":"","tlshash":"38f0ab9b76da14742d4fa0365b2c8e283112215ab0844033fcfc88352f182ae4966be8","size":493,"data":"","first_seen":"2025-03-14T05:32:35.576357Z","last_seen":"2026-06-27T16:09:51.856283Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"510ab36e4d11741c4f7660b1fc09c56c","sha1":"26f5ad607c0567c9b03c6551313ead449e5ca31b","sha256":"085c4d8728119c92d0d0daea48eac222d9581d98aa4a77924a6c0ecb6f5d9034","sha512":"db13b9167cce862679e3a4e52bcf2787b691fa7bd38678a3e5ac65cf363392733c9df76749fdb4c70e1886a2a9d19d54b5ce8822104c92149041af1458da2a88","ssdeep":"","tlshash":"5831bb5b07b161296073a11dc546e288353350df2959995e366d0f503fc8a3f53faaca","size":1753,"data":"","first_seen":"2025-03-14T05:32:35.577102Z","last_seen":"2026-06-27T16:09:51.857699Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eb5fab855d9326f2e7314f51acb6bb5","sha1":"483ec75fd2d689c907bb52500f60aa54e2c1d9e9","sha256":"ec55e25da01179e5f39a10f549ef5b0b611d6cda4ca560855cb6e1741a4a7c46","sha512":"90e602aca788fbf62b15fd00b386578feae5a9027fd04b97addc986ed41b27d3ead60acd8522c664aadaa38c4f70d6617b9d5329e4a72fb68e262ec740354f4a","ssdeep":"","tlshash":"0821ca3ea8fa11130aa774b8276f625434261023191ded853b1e9b849f8c63e1272bdf","size":1313,"data":"","first_seen":"2026-06-27T16:09:51.749319Z","last_seen":"2026-06-27T16:09:51.858968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30c57392aa602e6da5b379f4bba3fd4f","sha1":"24a08dbe2b2825e7196f56a44d5ab1cc4aa94de9","sha256":"e45a4b946562d9a470da5be5e5d295b42d172dfc8492081f762cd0fe5ce69430","sha512":"1f750af90e7621c4950b0caa5ef0b693e555447777f64da3ed70ce7449ddff0e10914147ce701b3a0aeaffab4efab29d8b9ce41d7aff7dd65330647ed20831ff","ssdeep":"","tlshash":"cf01c2c9b8d2747bdac93259792faa0561720104748458339e4cd757df35daf47268cc","size":832,"data":"","first_seen":"2025-03-14T05:32:35.581347Z","last_seen":"2026-06-27T16:09:51.859568Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72c15d027231ce4a1c74118206e947aa","sha1":"6c1f578fb595efd627d763a7c3cb16a49eefa9a2","sha256":"7bc4eaddece3381f181e3d9975c7b06a0bcf180d009bba024de1f0a5f06d6df3","sha512":"70d4ae4e104c4cbd1d7544de47ee353568ff59ae465c582e63d4c924e31886e590ec779336543520ee512a681f64d0bbe5dbb3d6c4a29d460ff8a6efe76a0933","ssdeep":"","tlshash":"1f01b42b62b551f0517ff37ca76fa740653200d7a0089e007d1d5f806f206384790a8d","size":689,"data":"","first_seen":"2025-05-31T21:09:49.921748Z","last_seen":"2026-06-27T16:09:51.841931Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2665a3e9760d8cb3e825b53fdaa4c222","sha1":"d4d32266c241e915705dc30a1d20c32f09fec05b","sha256":"23be924187f30d9d998a543d67cf13321ea56df2451b4a6ceccc3669e9acfcef","sha512":"02a33d583cdc9200fd2a684dc13da82f67e7d8edf25413e0a34f01168ee570ebf3396b2bac9c805d5ec5c955477f036882ea8df4cfcd4a600003dbdfb0edf7b8","ssdeep":"","tlshash":"f101594a14b770382aba30fb2baf1159355514172840ed54bd8dc2646f14fa98a7a6cc","size":674,"data":"","first_seen":"2025-03-14T05:32:35.571352Z","last_seen":"2026-06-27T16:09:51.852745Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"847d0011ea4ed07099aed9f0ae9cd848","sha1":"0db39a206c8cb46b7c6aa72bdb0bedb0ed76c170","sha256":"f58a935d783537ed037341b3c70d9d8fd9a10fafeb98471b6ec06f63b3cd376d","sha512":"4c425826708a58c2a747733a0e4e96f26d4b4730678fcb6eb521c5b933da8d6ec107066457e489acea6afff6da5713328bb99be4cc2af5e9f2747bab58eff820","ssdeep":"","tlshash":"d561e11e0de3b554317370bd9baf92547127106b2495c5093ecc9e006fa067e9baafc9","size":3226,"data":"","first_seen":"2025-03-14T05:32:35.572593Z","last_seen":"2026-06-27T16:09:51.853684Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"976ca226ba6fd886ea98106c1f2285ae","sha1":"c7202279c5908ba8042bed90212fea950e71e863","sha256":"d981cfcc9bafb07c0949e5a9caa6911052157f13e8c6efd4bb223d89a0a025d7","sha512":"32071cd68bae248bfbd04af8f792ab1572e2445c47c59efbd7ed40fa17877518300f7276233c96fe82fcca544bd1052931bcfac6faced5d302dded9416ca00ba","ssdeep":"","tlshash":"3d51425a35e8b7288217b0a4994fcd48f630042a11e8e4458b4cc9f6ec3897dafa8cdd","size":2666,"data":"","first_seen":"2025-03-14T05:32:35.574917Z","last_seen":"2026-06-27T16:09:51.854233Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c0c9148219e1d81665171f12fc19633","sha1":"3912906f02816b257d35abbd9b69cacbe9e736ac","sha256":"2a48e2e7a837a11d6721adcb7ead5656766098ae620ea6607d434b57dae2c0c7","sha512":"01b6a972bcafc5ff58efbf13505ef4eacd11bc955f4379c5ea33bf9c19e200b23ea14e14091138cd22232c6876bf56c01674cdcd3342caf4b702b02b9a1b3885","ssdeep":"","tlshash":"f8d0129ce0613f0211f23078bd4611b21991366f5f149138794c4d0c2fd41277133589","size":227,"data":"","first_seen":"2025-03-14T05:32:35.57562Z","last_seen":"2026-06-27T16:09:51.854878Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3085a758bb994f2b512ee8f1eeac8707","sha1":"8a30a1d944eeb315bd79e90c60e4beca717faf2d","sha256":"a2dba0967ec34c8155d48970567f7e4fe97fa976e86c92ad0173dbd27b591932","sha512":"0edccf0eea112dd764ddf32c3193eff58d8ff39f608f7a91734a023f81a45a84b55dba2526400802c82c5ce69de0ca2bd8c63243462a15e0413446a77fae407c","ssdeep":"","tlshash":"38f0ab9b76da14742d4fa0365b2c8e283112215ab0844033fcfc88352f182ae4966be8","size":493,"data":"","first_seen":"2025-03-14T05:32:35.576357Z","last_seen":"2026-06-27T16:09:51.856283Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"510ab36e4d11741c4f7660b1fc09c56c","sha1":"26f5ad607c0567c9b03c6551313ead449e5ca31b","sha256":"085c4d8728119c92d0d0daea48eac222d9581d98aa4a77924a6c0ecb6f5d9034","sha512":"db13b9167cce862679e3a4e52bcf2787b691fa7bd38678a3e5ac65cf363392733c9df76749fdb4c70e1886a2a9d19d54b5ce8822104c92149041af1458da2a88","ssdeep":"","tlshash":"5831bb5b07b161296073a11dc546e288353350df2959995e366d0f503fc8a3f53faaca","size":1753,"data":"","first_seen":"2025-03-14T05:32:35.577102Z","last_seen":"2026-06-27T16:09:51.857699Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eb5fab855d9326f2e7314f51acb6bb5","sha1":"483ec75fd2d689c907bb52500f60aa54e2c1d9e9","sha256":"ec55e25da01179e5f39a10f549ef5b0b611d6cda4ca560855cb6e1741a4a7c46","sha512":"90e602aca788fbf62b15fd00b386578feae5a9027fd04b97addc986ed41b27d3ead60acd8522c664aadaa38c4f70d6617b9d5329e4a72fb68e262ec740354f4a","ssdeep":"","tlshash":"0821ca3ea8fa11130aa774b8276f625434261023191ded853b1e9b849f8c63e1272bdf","size":1313,"data":"","first_seen":"2026-06-27T16:09:51.749319Z","last_seen":"2026-06-27T16:09:51.858968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30c57392aa602e6da5b379f4bba3fd4f","sha1":"24a08dbe2b2825e7196f56a44d5ab1cc4aa94de9","sha256":"e45a4b946562d9a470da5be5e5d295b42d172dfc8492081f762cd0fe5ce69430","sha512":"1f750af90e7621c4950b0caa5ef0b693e555447777f64da3ed70ce7449ddff0e10914147ce701b3a0aeaffab4efab29d8b9ce41d7aff7dd65330647ed20831ff","ssdeep":"","tlshash":"cf01c2c9b8d2747bdac93259792faa0561720104748458339e4cd757df35daf47268cc","size":832,"data":"","first_seen":"2025-03-14T05:32:35.581347Z","last_seen":"2026-06-27T16:09:51.859568Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/game/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90ec7535f382b9197cd1a07148491174","sha1":"2c0e0dbbcb43c7d6b7ae07c57ce6dde62b60c92f","sha256":"6b0f530ce83f5ddbca7a872e10eb2c4fced2c637bda93c07223a86fd7648ce61","sha512":"f504362879993e1487161a307b184caaa86a16b5000fce96555b54facaf354ed84777ab3727f2ba4050f51f1dbb940e6ccff3d12095ccab3c59649d6b033e458","ssdeep":"","tlshash":"8f2167df00e5020921b3a5699b83b240303710eb244ac91abd6d47547fb872b87a6fcf","size":1413,"data":"","first_seen":"2026-05-26T00:11:37.999797Z","last_seen":"2026-06-27T16:09:51.84083Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/game/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c557c48a8ac62cc1fcecc3abfd266ab","sha1":"7afd7e66f28cf99e801bf3131b45b75b302da292","sha256":"94ffb18835c55672d01cdb9bb47c387bac5f154e74958a2ceee7dec862e2b7a8","sha512":"7de91adcfc639caf60575f9de701853ea0ae90b757149fc10c3b4d725631b74a3c63b5804f0f96dbcccb580a2195420b077b2e3b30841ed12f947f332f29d7c0","ssdeep":"","tlshash":"3441ce9b16b722284273e0598a0be2487833905f2509d54a3a6c5b507fe4d7bb2f6bdc","size":2074,"data":"","first_seen":"2026-05-26T00:11:38.000601Z","last_seen":"2026-06-27T16:09:51.841428Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/app.4b7d4b297cbed55e3a57.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f014227ededd4301c66559d8002ac4b","sha1":"be55749f36148bb9c0bab14045ac9055016813eb","sha256":"61cb968f75c3f9c24b9ae6aafae77316c18286598598e58f6b2f771516dd9dd8","sha512":"e94f4ae880cd7893b781e10ee696e53eb3b4c87643b33a33301c93926275702b5ca9959162078ad32c78b8342137a90b266214e153bd7ec9d66e6b7c7ec9d781","ssdeep":"24576:u+FTYaQqchxtaHo7P/aWilpb609XOObG+dEdaS9qRkU+vpzZ0OUN0RXGkqXTGS2s:uKM30SP/gr5bG+AynVTaPANb","tlshash":"2c368d6ab1c0b0b549624061251f364af3743ecda40884d9b27ddddae7f4ba9122bf3d","size":4976472,"data":"","first_seen":"2026-06-27T16:09:51.754173Z","last_seen":"2026-06-27T16:09:51.86289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-27T19:17:36.868076Z","times_seen":76261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-06-27T16:09:51.874848Z","times_seen":23179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/vendor.a381bea070078c8a0258.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82eb2b4ab5e5e90bf5cac5d1ae86a7db","sha1":"332d5e310ec0b8bfe972d5d1a477216b7727491f","sha256":"af4feaa30fccae33183be4eacf63a6e3bffc317868bcb150317641d13be9f0bc","sha512":"e27c39e5e1ef1bc66e636cb9bbea7bc9bdaf433cf6397634894914f872a0acf96a47d8cd6dea60026dae69ef0107472f6d7f51db2041897e16a8dae90bc1c472","ssdeep":"49152:sx1pqkrD5szLomqKWp0hlyecIyolFTc1prE1OYHCtc/6a0lW:k3qLvdH1/6a5","tlshash":"6bd51999b291b43143a760a0407f050be23b294db40ac5acf679e8da6dbc94d613ff7d","size":2878172,"data":"","first_seen":"2025-03-14T05:32:35.578827Z","last_seen":"2026-06-27T16:09:51.861296Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"query","filename":"https://mango-cleopatrapg.com/home/game/","line_number":29,"column_number":17},{"level":"log","text":"originmap[actor:server1.conn0.watcher17.process7//obj63 class:Location extensible:true frozen:false isError:false ownPropertyLength:15 preview:map[kind:ObjectWithURL url:https://mango-cleopatrapg.com/home/game/] sealed:false type:object]","filename":"https://mango-cleopatrapg.com/home/game/","line_number":30,"column_number":17},{"level":"log","text":"h5_iframe.src:1111","filename":"https://mango-cleopatrapg.com/home/game/","line_number":107,"column_number":17},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"加载完成","filename":"https://mango-cleopatrapg.com/?isredirect=1","line_number":284,"column_number":17},{"level":"log","text":"服务器地址：wss://server.mango-cleopatrapg.com","filename":"https://mango-cleopatrapg.com/home/js/app.4b7d4b297cbed55e3a57.js","line_number":1,"column_number":1305130},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25},{"level":"log","text":"AppPath:/","filename":"https://mango-cleopatrapg.com/home/game/","line_number":46,"column_number":25}]},"http":[{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/app.4b7d4b297cbed55e3a57.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.248Z","timestamp":1782576554248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/js/app.4b7d4b297cbed55e3a57.js HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6892c529-4bef58\"\r\nexpires: Sun, 28 Jun 2026 04:09:09 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIqVrThSbAutzoX1O0At%2BCacg6C9YqBTvc3MAPhECQJi%2FjV3lakZUcWE31Eibu%2BGwk33rWKDZIEXYONdoMGgIjgOpexXrzS0Z9rc8vgbnWJxnXqGZ5EydiwCPo4eVYTOxVdQ00Fislc%3D\"}]}\r\nage: 4\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a125b7080f57dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4976472,"size_decoded":1511106,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65185), with no line terminators","md5":"c95099d726c57d8358804705007bd5a7","sha1":"93a32d8d84a4c2c214ef0824cc6cd2ce91b3a0d4","sha256":"0712952cb3d1568ecec06872892f72f01809a68499e9ca95ac27c817b9e8bd82","sha512":"302e7c38afcf8702ca782663b9ae79ecc9affb3d26bed271d596e3c9bdf88af82e7ee457860f8972e0b7fb2657f1bae591635bcad5b763ea8718528056d2ab8b","ssdeep":"12288:u+Xf9M2exa5DaNkEMchp2ZStaHAh7is/aWCflpbbpI0T:u+FTYaQqchxtaHo7P/aWilpb60T","tlshash":"cb257c9da5e0e0aa69210475290bbf087db13c9d988cc95170bc7d93fe65bc92392f3d","first_seen":"2026-06-27T16:09:51.695082Z","last_seen":"2026-06-27T16:09:51.825353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"company-fj.s3.ap-east-1.amazonaws.com/siteadmin%2Fupload%2Fmusic%2FYou+Spin+Me+Round.mp3","fqdn":"company-fj.s3.ap-east-1.amazonaws.com","domain":"company-fj.s3.ap-east-1.amazonaws.com","tld":"s3.ap-east-1.amazonaws.com"},"ip":{"addr":"3.5.239.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.121Z","timestamp":1782576556121,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.ap-east-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:AD:E5:A1:B4:A4:79:19:8E:F6:BA:62:73:73:F9:CC:6B:D3:C2:23","sha256":"3A:BC:19:B1:CB:28:03:44:0B:D4:29:32:3C:7E:2A:53:1C:59:35:F5:1F:DB:51:26:C1:F1:3A:A1:5B:DF:9B:E8"}}},"request":{"raw":"GET /siteadmin%2Fupload%2Fmusic%2FYou+Spin+Me+Round.mp3 HTTP/1.1\r\nHost: company-fj.s3.ap-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nx-amz-id-2: jDs/IUZ/yFkCJ7QVF3WkktjxDabkVdQky1k0SFqmt3g7yGGbGRor0RuGZCk2fE3Fqu4S5nAtphog/Xycv41+Ll67j1n1LFiW\r\nx-amz-request-id: W3XJY7E3KMN689B5\r\nDate: Sat, 27 Jun 2026 16:09:18 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 08 Jul 2022 09:40:42 GMT\r\nETag: \"568a85dd4f4a6a6134d8db49250a3412\"\r\nx-amz-version-id: 6KLbiJvZ2v3pebHDnJ6ECFwnUs.WyEok\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-1710257/1710258\r\nContent-Type: audio/mp3\r\nContent-Length: 1710258\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86518,"size_decoded":87040,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"b0bdd96ac07a9dd69cf6cc8358733511","sha1":"649a4526856dfe7c50dd90e56b2f705354ad261a","sha256":"6c809b67f8bde07c9a6951b72789f840e1d98a7b2c5b4309f39c26a1440fd2dd","sha512":"60d092a7f8b147dca5a28307830f3aff4eab54ae79904f5fd1594bf3d7915638b9898f9d80049a8b79d7e6e605430c98d2e5facdc4dbca98a14601a28213f45e","ssdeep":"1536:pFIW6Xb1h1x9SWMaRV6gyCCFCCZQRyzDyKJQn0iswoOOAyd:pF+1vx9RMWV6gYCcQkzmKJq1siRM","tlshash":"2a83010f15fa10ddeae340f0b8d94cb837f8ad132e5622d491b77792c4ba9392d846d9","first_seen":"2026-01-03T12:10:22.833557Z","last_seen":"2026-06-27T16:09:51.696138Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1559,"timings":{"blocked":0,"dns":3,"connect":253,"send":0,"wait":278,"receive":511,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/circle_sound.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.005Z","timestamp":1782576555005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/circle_sound.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-19a6d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5l8DlxLS4WfnD3sBlMQojPJaw3Ikl4GZM%2B0XQu%2BSIFEyIyqTpFs%2FWn0gSlFBh7rhuUDfdB74BtV%2FN%2B93zbnKKInfKqv7Q7EOgcAjVP3TE0CexX%2FpDygPr8LHPgZVbIpUgxbXLK7TcCo%3D\"}]}\r\ncontent-length: 105069\r\ncf-ray: a125b70cc831dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105069,"size_decoded":105785,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"bb3ccdc0df8c19babc85a8095991e0a1","sha1":"748bd2ba773413628d5716562cf340aa9804aa21","sha256":"9a420583c78e255fbba9b971dd6207d10d1a4be64b9ad5238bf467b132c5400d","sha512":"27ba90f2e81a3ca939830d22b26f2d4dcd15f8f7f69539532de80408eb3ac4b6d0c578d9c3a3cfa917d42be6b1d66da35ad4ebe7ef3d9d48eb1d25a5ccf2dc8e","ssdeep":"3072:gXjOK9uXeNJ6sFeTNFWb7Ixl01WO+7V5vg:o9LGWSMIVy","tlshash":"40a301c5def0deadf001853420aa1d86d6522e745a317dcce6207f92acf36b1bf96a14","first_seen":"2025-03-14T05:32:35.526927Z","last_seen":"2026-06-27T16:09:51.838555Z","times_seen":121,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet3.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.027Z","timestamp":1782576555027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet3.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-476d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKZU3op3x%2By87qm5wHLo3LP%2BgVgKADPqKbLdJAg9Eqsej6dLXfswxWRWfdwuueB%2BCHwTeyYFv1%2Ftk2IOuDh3bSRLekauxEB5RoeZLAZ2qrmpHSvn4IdEHnHyP%2FXMGEHkNPRyqcTR0zg%3D\"}]}\r\ncontent-length: 18285\r\ncf-ray: a125b70ce83bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18285,"size_decoded":18997,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"d408f954d4a3634cb2bcb50653f67575","sha1":"9b6a7942c6b659b215110c7ac9b9359da10db2fc","sha256":"7b63b636beb55fac5e24ab28be73f57b370c279c67ae291efb70517a24fcd2ba","sha512":"96ce4c5a8f2cc390dd5994310164776d127b348f125cef397bf7fc50e4a29894fd0032ad4c191653b50f17e3e85a55a66b5f9640db86a23fcbc0d131b1f03e78","ssdeep":"384:GZep1Gu1JfdtFGV7mJ8UyUGpEn4uNXgbxCh:GY1pjoxmLyUGpEnv+xCh","tlshash":"f282cf574bbea20ef08579ba0f435101ea046e2c751deaed12353f34723f6504baa39c","first_seen":"2025-03-14T05:32:35.550665Z","last_seen":"2026-06-27T16:09:51.778063Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/activity/IMG_3.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.989Z","timestamp":1782576555989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/activity/IMG_3.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-1340a\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hy6fNTfoE2SgpZvokAvKDa1G7q9T2%2FSBrA9VSPJ0n8XTUHvawprKx%2B%2Bn76DqFquDwn1njNll0QWV3CJt%2BUW3AKD81Zf2UkC8eIPKMlFjGe2Rhax8iUC1bYI9NQo1K7FeX%2BuQAwRon04%3D\"}]}\r\ncontent-length: 78858\r\ncf-ray: a125b712e903dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78858,"size_decoded":79568,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f765f750ec4dbe9eb3c77ae52c59b965","sha1":"6249b755a5397de9b1f33c2c99fa70cab338a1f9","sha256":"5c88f7e94c55f7b5d97190789348ec788c9ee12fcdcacffa2470ff538159a80d","sha512":"342e506c98785915bdaa6d277e256459f74b0a8165e5578ef5ca5b614b6ed36e18b8f7b8476518f69443d181337a41cde6c4568615d1eccc83df15204a974d53","ssdeep":"1536:FHFLjXjGUUpbLR2/POgoY2qid+D8EZsVFmlvEc9X+Y:zjXjGUUpvR2/z/2t4oE8FmBEkh","tlshash":"737302f0b272494bd84486d7814c2e40c954a588277ec3b27fa439fbe40975bb5deba3","first_seen":"2025-10-11T10:32:16.814856Z","last_seen":"2026-06-27T16:09:51.740008Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/colors_start.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.994Z","timestamp":1782576554994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/colors_start.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-2290\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJa5zPB3FU%2BoN4PgRM906uAgaoyLtunlbpJcNPoUe6EPV6f2bUJ5UWhXzKTxLgJ6cfTx3IRzS3m7gCn0TFO6lJBdw6GMBg6kj1zcOocQjhiBGqmKxcTAGoi1WjnNrXzWfLWTxI%2Bru4Q%3D\"}]}\r\ncontent-length: 8848\r\ncf-ray: a125b70cb82cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8848,"size_decoded":9553,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.2.0, contains:\n- MPEG ADTS, layer III, v2,  32 kbps, 16 kHz, JntStereo","md5":"66d98a1acf79ad98668959ce90988212","sha1":"16fb0fb5a2058f2a53198247b691a6b474071083","sha256":"fe520f914d3632134bac53ce2d8c8360fca297e114bdc7641b08b67c46167d78","sha512":"02f04322ee2dbfea43ce2175febcc24d3ace579da4dee7172574bf5108871746bf7e2d2fa8985217fa9a3c9f2fd45c423f550ed6c442eba60d95bba19722cbf6","ssdeep":"96:QNBLzvow2kmcOBSXdNTOcKrbEG83cTMXK03o09R3Zm0/7Itl:QjLn2Jcfz5EbjBKK0Y0XZm0/k","tlshash":"4e024b446717bc1ef4026bbc220a371ad1bcfda724f0e1c01b55e694b4574a81bece80","first_seen":"2023-10-25T16:00:52Z","last_seen":"2026-06-27T16:09:51.813287Z","times_seen":122,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/3.f239e76.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.031Z","timestamp":1782576556031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/3.f239e76.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-496f\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SITQuBNEXZ9fYVIaX6pOzQFd90E%2FZhF4qj98pbFVqnH7j47Lo4%2FNgwsFaLhNt7gnvYFd48nTjkNnQy%2F01dQfox2r5Oq63YSMAZdZC0c9l3Em1%2FPbTpb0vmc%2FARgbeYY%2B1fz8KUX2OZ4%3D\"}]}\r\ncontent-length: 18799\r\ncf-ray: a125b7133922dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18799,"size_decoded":19551,"mime_type":"image/png","magic":"PNG image data, 300 x 108, 8-bit/color RGBA, non-interlaced","md5":"f239e761f794e7423612d1873f74fcc6","sha1":"eb86cc7ed010d82d36f0999a9b718eccaa596fe3","sha256":"2f3986f6a211b73dec72d4549795eebb0bc043893f78becde342d0547ce84e55","sha512":"5a3e38cfd64bd815bf0f68d0ce0b05b93a6eec98218c947c67ca1a1139ff75e851caeb16cd8b6d11de8a4ec3ae680c21a7fc5aa5264fb5c1c67c86ab08f42caa","ssdeep":"384:bTr6HLM1KTFmkS8Zh0QQfjgFdh9pBA/4nn4d9cgArs8UGTokHEMx6:V1GFC+9pK/4n46OWEf","tlshash":"2282c0efc184a7c93b6371a22080d10d79125539fdcc65333616b6879d922d72d4abce","first_seen":"2025-04-19T15:34:35.414697Z","last_seen":"2026-06-27T16:09:51.751172Z","times_seen":43,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/4.ac4453e.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.032Z","timestamp":1782576556032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/4.ac4453e.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-3c6c\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qV3U40QI3JBjwgC%2B8yiK8l4do5GWgQH%2B4lohl6%2BEzt46sGrv30WbSkXzEGIdRwQ5eJ3ekwbtYlD9drYh4MyAy6J1TAO7FTCqver9arG%2BtK79I2D52989Mw2AKfhSwtwl3BZFFabGpLI%3D\"}]}\r\ncontent-length: 15468\r\ncf-ray: a125b7133924dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15468,"size_decoded":16216,"mime_type":"image/png","magic":"PNG image data, 300 x 108, 8-bit/color RGBA, non-interlaced","md5":"ac4453e1e47f8eba847346fc64be0fcd","sha1":"0b04af48f69e541d78e083ea77d28a8f85912fb2","sha256":"5ed27be086f5249980a463330fa29dd6e13d06a226c6637d5aeeab080c777155","sha512":"0e50f7b89f9db2feb803e5482c9bdfe3511853474bd46237e8627533436d1d568102c77dedc9a477466a8fb96576fcbf777a452683e76d2a69220fc5e1d2bce1","ssdeep":"384:bXL0ejdrg9yOu/IjX4F2RA6KIR+negU/sNDuIQLm3r:n0ejpgjTJ+RIshQLsr","tlshash":"df62c0c7ad0858dcfdda8ab27df5b0c1a4c4506b9ec8375e3cd41cc9ae583a049fa594","first_seen":"2025-07-05T10:31:20.130581Z","last_seen":"2026-06-27T16:09:51.794559Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/98_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.571Z","timestamp":1782576556571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/98_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-9d1d\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9mFx4k3Kpj7AyV4TVzpkOdFv0cAdhplc8Sh95xmjVFtTeQhme4UHKz4YkIFV6GayAq7pwuEHHo7xdAfe1FKSlSEvoPIdT5wS6DjkN9QGS1THFgikhxRsVF8gUk3o1YO3kWAb1RmP%2BY%3D\"}]}\r\ncontent-length: 40221\r\ncf-ray: a125b71699addfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40221,"size_decoded":40922,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fe705b6212c19a876936ac9fe0294389","sha1":"802c625e7f069b1d6e030a7079b5135f30427c76","sha256":"a8b8c34fbcb6fc09932a07ec3745d620fab2e0438710b1ff89dac7a3fdfe4d3d","sha512":"04a7d8f6d909da09ec552a6cd6ef71dfa56830ff51de76848afbbc9cf6d98c96fe4f71b6c0938b01b0d6c98bd69311e86f17f5d928c64a52b0830253a287add5","ssdeep":"768:M8htZ6rBJspFTrT8QXB8M8aUe0orlTb5xXQKxE3ERJ8u9/pN9W0:+BJspFA28xKrlT1xXpE3ER1FZ","tlshash":"c503f214b3ae3c8368da49585d320b6fd83cde7d1c5b26512b92f82c815ef7845f8227","first_seen":"2025-09-26T05:22:37.271548Z","last_seen":"2026-06-27T16:09:51.824867Z","times_seen":59,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pp/1694422608_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:17.088Z","timestamp":1782576557088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pp/1694422608_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:17 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-a0f1\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vIGD1ZvgOY6YDoggNTsM%2FqLjnlO2%2B39Uua0KMQoGLrZnhnZUJcoYQ3TemI9rqj2g%2BLKX%2BGhpXTSSMYaHKrYkofg9I7gkCBdKq5esfUe9grsEOMMBmmm8U9Ilm9D5wg%2FXSw8Eu2ICkE%3D\"}]}\r\ncontent-length: 41201\r\ncf-ray: a125b719ca2bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41201,"size_decoded":41910,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9cd4a92e7123ea9de327014d0cfc9899","sha1":"afb4ce61beb6cc0dd5d4b0a69ef26d6290d78aba","sha256":"24abfeca4ad8c5fbd73b8ab3f7efcce5e1073f5295da67cd0c35fc2a68fe0a31","sha512":"accae2287533cbe8b121cd7151181d96b115f510d4990628165e58855ea818228cba2c431bad212a98d57b678938b169b4335cf0ee6015f68a4a73e757a9b2ce","ssdeep":"768:OMFvbbpCZ53BDrGia/tX7rHdtKz1F0KOTbfqLb2y9BUjw4irHvV7+k21:OMFv433BDPa/tXPHdtKBUb0ayIurM1","tlshash":"8903f0377cb0baa1d488e6f85c07de865525cdd9d8af6b4f9f48640997c3b128908c2f","first_seen":"2025-09-26T05:22:37.228065Z","last_seen":"2026-06-27T16:09:51.776114Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T16:09:12.660Z","timestamp":1782576552660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 06 Aug 2025 02:59:52 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwU7Y6UvrUF0TVkivKkNTQmAq9f4TIpE9qo5Ko4c%2BnfMfyZn53hfg3qzQFwwGHXxl4nS0lULnjHwjN5IBA%2BoAWNfuF%2BAtS%2BHAo18Num3k%2B7LfD%2Be8AnHGAGb%2FIBgmXx6hISKEQNyFFQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a125b6fe4e50dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/game","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T16:09:13.269Z","timestamp":1782576553269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/game HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:13 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: http://mango-cleopatrapg.com/home/game/\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXYW8npEur%2B%2BuWepDvbH46Jg30CyhoT9VjoprrLGgPTK%2B4h3AVW%2B6Yrvz5L1ZAvoeOWgrDqglZ3a%2BKtsCWqljW24N4U61pynGW338uM53K5fmYiXHGmeicdoHeP5TLLpVnGCXacg2to%3D\"}]}\r\ncf-ray: a125b701eeb6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/fruits_tick.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.016Z","timestamp":1782576555016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/fruits_tick.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-baed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlJQcjYgR8mIt%2BapT1E1cxod5vcFEmi0YL2Nw79LkcOyw%2Fg%2F6SNfQPHp1zw0xQhRxO0MXxKTRWBKURQXW0YUc7NOh0WrUP2DqTI2%2BkSRfN05fLYBA%2FwBcJ20GQvhQA9Lpkwb1VW8fds%3D\"}]}\r\ncontent-length: 47853\r\ncf-ray: a125b70cd836dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47853,"size_decoded":48565,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"59367f1bdd629e179061b41ce3f6aa58","sha1":"49b6bf9815ab830b29878f33987cca712db6c453","sha256":"09dafd446a446b021125e5dd0cfa0d8cc2f21b79b3eba96328fd0bb3c947fc78","sha512":"d2d45d104849ccf0bc3ec95b3d5b6133c98713b5b64e8c7975b10cc42b095249abb73206e1b7ede6fe237ea03c0ece37a38b77201b98bd2ad0a0343a1fe711d3","ssdeep":"768:WETTnBuljhAUPJzMOfbNRrTeIQvnYYSDcHUwBZxpbER8IDVMtx9+YSfihUutEP8m:d9uljPWOfbNTknY9n+pbABMJ+YSVu6VH","tlshash":"4323016a45b5824efb554ebd388b4538d83b2f3ce08f99eb43b7bf4002f5459a116909","first_seen":"2025-03-14T05:32:35.54638Z","last_seen":"2026-06-27T16:09:51.815896Z","times_seen":121,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet1.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.022Z","timestamp":1782576555022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet1.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-5f6d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVWXysMJDLkVnnAfMxtz2nI4z6EUTgo59ehLOr8s5flaaPst0YKfVvy9DQJRXJMPTWz%2FqHuRm2QY9LGILVatRou19FRex1TG5rNLLiVWiynNnM01V5HlYvPklXoFq1Ahryj9OVbLw9s%3D\"}]}\r\ncontent-length: 24429\r\ncf-ray: a125b70ce839dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24429,"size_decoded":25133,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"6f3a0742b3886f455c2ab9cf6625f3ce","sha1":"dae9f0c54aa5d166217a8302a6985656c85d7477","sha256":"0a1eb340b7c7fcd8ce193de3e9bb1d1d7ec0f27c1dc937dbbc65f45078f7ae89","sha512":"bb857bd038517f598e2009c5a77b57eee1f418bccc0c1100e7f2eeaca09ca5269fa4d44c55e18718f95ff3d9c0bbf31f8104e4961ba9d4d38da0a64084dacef9","ssdeep":"384:svMJ9BrtB9eLztG5Bi9q7dUhmyJzbBq8xmfTAp1u4sLOkyH6goFOaUbsc:HJ9BMLzt8isJfO5qumfTA7uh6H","tlshash":"ccb2d055ebfc0c2efc89827c5b5d2634efc1b5944a21e253c9818fa4e17b61313d6691","first_seen":"2025-03-14T05:32:35.546983Z","last_seen":"2026-06-27T16:09:51.795124Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/126_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.566Z","timestamp":1782576556566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/126_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-a619\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ6CEvFnOvApts1clB2TkwsVpjfn2OWO%2F7atubpLtKnrnihEL4p2mNaNg5OnyhKL9fx7lAO%2FM7pVv2VmpLPtQjmuO%2BtfihGZP0Poxku9kEFP0PrQyrDbAWjo3y0LV0Nxqnz4bosNxow%3D\"}]}\r\ncontent-length: 42521\r\ncf-ray: a125b71689abdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42521,"size_decoded":43226,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f1758fe572a9812bfab61bd6f5e96f84","sha1":"d632413b15c29164a9ec733c809c9e7c33e00359","sha256":"bd844a0788d32f6c5965eb3137c0843f7028d67b94a5f149ffef333bd4fd8c89","sha512":"fb5d46ff8c573cd5645a67557a6b495a8f9a0fbf6cc9c3fa64478b313fe086a5c8ab84afea1c28d822a604b7902ef73dda6163b0bcc18bc125da20675085235b","ssdeep":"768:GloZUCc43Q2D73q49T1hfzsDJJZYfIoTbCsEEPxW+yQZOS0auWI54EX+Jj8Thcni:ZUC3Q+q4NLkJsNXqEA+qvxL+Jj8TgS","tlshash":"f813f1e02341966be1c65fb1a4660c3ebaf5505123febb885d8933876732ca94b70f34","first_seen":"2025-09-26T05:22:37.273417Z","last_seen":"2026-06-27T16:09:51.809177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/css/app.0640bbd82e3d81830979219f9af19580.css","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.017Z","timestamp":1782576554017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/css/app.0640bbd82e3d81830979219f9af19580.css HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6892c529-19f080\"\r\nexpires: Sun, 28 Jun 2026 04:09:09 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmxhyQhhP1ns2E1wJmihsnA%2B4ZR3WEVNA9uX4ikIShksP1Yq6%2FyjZemPFXSjVPve%2FEjXKpXNeUbrzz8KQum9ghE08wcG3w4gf47Cn2GKvtjfA2P504U1cbf7pz5uW2NvhPMEG8FmvQc%3D\"}]}\r\nage: 4\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a125b7069f2edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699968,"size_decoded":262617,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d1acc25b5a84ca7834578b1a3d6b5ef","sha1":"056e43fc9c81fa55418b22c7fb5424e34fe7a63e","sha256":"4f72787de16fe6fea6a90305f02572c0d066983dd55052506255744e32bb9ba7","sha512":"263de3f2e8bf1ff852cd1977a843d9cce6b067000ce66623fa405c4cc22536567ab01fd5bda42828159b56db6593a838b74f00fb7780cf267c2f8cff8a4b4afc","ssdeep":"12288:HtSSwUF1M7s2kn5Q6Pq8TOku2Kt/l2pC3pEbyyONsVGcuB0B:oBLiQf8TnRadOe+byyONsVGcuB0B","tlshash":"e425b473b64c211aa53bcd3067906fdc6519f637910213fdec5379258fc3ba22ab624a","first_seen":"2026-06-27T16:09:51.705404Z","last_seen":"2026-06-27T16:09:51.830951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/colors_end.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.992Z","timestamp":1782576554992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/colors_end.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-28c0\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5ASgoNQApIPE4GxELqdeFSMnl95uQI%2B2cMCDxbo4A2SOfiwJhg%2BUyNlot6KhjrjqincgvDvVaojqJlBKmib7Y37aq3kC8wzD%2Fi8OOIrJzGyCJ4kRJYxGA5Y9En9w4jUKfjvRXtHYBA%3D\"}]}\r\ncontent-length: 10432\r\ncf-ray: a125b70cb82adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10432,"size_decoded":11140,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.2.0, contains:\n- MPEG ADTS, layer III, v2,  32 kbps, 16 kHz, JntStereo","md5":"e0259b8f7c28fddd674eaa1dce8618d2","sha1":"9a6f86f4b6808180b2904cfc729867ad8bf32087","sha256":"0c2b5a0049afcfb7eb66f1792c0e522c57c38e5ddc20cfd780f73adbf9e09a35","sha512":"eb65459401af8b00bdff93df8aeaa5ca315506b5570db4c08a74c18f07e05db6b2fb53cb4d0431fa032fc4c96daed45dd905cc9dde657148e1f1fff89baee34b","ssdeep":"96:xNFg9OTiotyllMRf++PkXk5racELckW8VxxlPW2VSCFV7rEmA:x88eoSof++smGQkXlPpNdr9A","tlshash":"1b224b2591953d2ff28325bdb2673308c29675d361f8a1d46885ebe0f657054a7ccd02","first_seen":"2023-10-25T16:00:52Z","last_seen":"2026-06-27T16:09:51.756064Z","times_seen":122,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/4.640f42f.gif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.039Z","timestamp":1782576556039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/4.640f42f.gif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-69828\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLhdTXuhY3%2FIjbUVhYhgohY%2FeXdeqi7pUJYMkuuuT0kHBRYJKVzajRnnCgxrWRbiMU7E%2BhNxPKUBArxLzzIRS6nfo%2F3yE%2BZpP%2FTY26XLTJLbXecbZDbK0y%2BG2IIDuYvVzHBjtqZ22Ws%3D\"}]}\r\ncontent-length: 432168\r\ncf-ray: a125b7133927dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432168,"size_decoded":432924,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 220","md5":"640f42f4b1f1bb14cbfc49bfd95bf282","sha1":"13a5a1660d5c31280b12a79e25ad6fb18255a30c","sha256":"adbd9cb6b9491c95386a2d75d63ae04ab0b8aa3e050a603b130e303149ad14ae","sha512":"301d605fb43902e5f5744df62b1144b8194b3cf15465c04eb87fe2239e8af6da386d57af563dcd377c97eb2ffc2eab061a423a0b8269903de929b786741f528c","ssdeep":"12288:uLWCjZS/nI2lY7hlQIZBtCdX9Xr1sdeqbq+fzj:HIjPBsb1C2+fzj","tlshash":"c6942356782b088ed7601c556e1ca2c148d940a37dfaee384c9878fb87cbe68dd78743","first_seen":"2024-12-20T02:05:37.730723Z","last_seen":"2026-06-27T16:09:51.773759Z","times_seen":67,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/1879752_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.573Z","timestamp":1782576556573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/1879752_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-c575\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szUciRaK%2FSqFl5MOnFPV38UJzl45Ampm9gwNdA0qPQMXikJCn0O9oiVEGdzbhAqf2%2Bp452Vq4iHtd0E%2F%2FNMxpZh%2BIAHTKXq1kXw3eIZvSkXJ2imhlkr6LISBtd0vVL9JEjgNFOT26a4%3D\"}]}\r\ncontent-length: 50549\r\ncf-ray: a125b71699afdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50549,"size_decoded":51258,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e6b7d27d62f37b7d5ea50e774b96bc1d","sha1":"18d978e381916344e36ecd8561d8e3099f9a7dac","sha256":"76502fccb220826345224fbf07be34e013a3a332923a723560ae15e714c068da","sha512":"2b77e08a845ab18a2795c8adb6f66c4ccb982dadbfd94355cd52190a5a3833b01651a1e48bdfdeac9e1966a9a8202091d4045bc7cc1e1118db62919e8ab7102a","ssdeep":"1536:7tWMxQ7ADLZftxnkLPj7YMPvZv3U51vR3:ET8hftFkLLZPvZc55R3","tlshash":"953302c07342b145d66c7f735fc26e3c86996a7a61f87772849b740039b3b6c9a24331","first_seen":"2025-09-26T05:22:37.301037Z","last_seen":"2026-06-27T16:09:51.754308Z","times_seen":57,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/configFile/default_logo.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.998Z","timestamp":1782576555998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/configFile/default_logo.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-eb49\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5sCMIjXc3B9wu5Ogb0KMm0zYJMOhNKdsHJPJtX07Z6MWqkrZJBEG6S9w3lXW%2F%2FzeqjMQxUYHgIQ1YznyjFqb%2FpZBAyhUILy4%2BUA%2FV6u8kHFNQcdtEmHM0BTMeThgWFdCPvyridvo5E%3D\"}]}\r\ncontent-length: 60233\r\ncf-ray: a125b7130908dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60233,"size_decoded":60942,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0a78c30400301bf287e80aea9e0f70f4","sha1":"c79066f64835cbc042727ff206e3059ae5a8fae1","sha256":"a01eda17f33ded0832d855330afe7e209f4b11133506479da17fe2c0a91038e9","sha512":"0d1123809bd0ae3e68200e60913693d9508203258f208b7f9b9ccfac480f3b5a1dde77ac072cea012c41ece9c1d68b27c7ac7c377c43c1be6cc4a8252e35ea3c","ssdeep":"1536:oANdrGspVcy4eZAsj2kwOjf8Y/Rb7ncfKfdn7c1yXh3Dh:jrGOVcyDZAGUOjf9p3cyfdY1wF","tlshash":"8e43f1b6539a3c4fc24605bb1404570e5253021ab33dd9f5ef4eef15bee4ca6102ace6","first_seen":"2026-06-27T16:09:51.707833Z","last_seen":"2026-06-27T16:09:51.73935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/1695365_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.574Z","timestamp":1782576556574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/1695365_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-ac57\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arQRt2kwoVbpgdqUEohIfuGJkvdYyoJIiPNasWdti5BuITaZq5TmwZyirK3l6OO6PbVBKpKcTNNfPu7H7rD3RnM9KNw%2BTB2MA3aS7%2Fpdhnrh8QXHetdbCswp2gdvLZNaW3SQgmex7WU%3D\"}]}\r\ncontent-length: 44119\r\ncf-ray: a125b71699b0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44119,"size_decoded":44822,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9d92b08989811ab6655f9c2ce1e04590","sha1":"e6cb3da3deca0dbd4399261724b25e68e2a0eeec","sha256":"143774b24a4efb38f6e0bb47bfc2ebbbed5c4db77417d8579c9f99640bf5ea01","sha512":"a2a3d0e2777f328f1f901019a9ce3fd69712a44405d759c0f1a01d345ec3786e7e1560f32919c1b8b5dbbe1f8d62b1079628bc89b9182c51f9f4427c3728b6a3","ssdeep":"768:ldDHf116RadFq3SFR5i3i74BldPAYhQu65G8sjzax/QAWTl1J9lxN4EY99o3U:lioq3S/Ci7cldhhQu6wBoWTlnP4VOk","tlshash":"d813f118366344fbe0491179588c790068b8bbc61694fbbd70c56f90ccda8e5fd86afa","first_seen":"2025-09-26T05:22:37.345528Z","last_seen":"2026-06-27T16:09:51.770929Z","times_seen":57,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/bet.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.982Z","timestamp":1782576554982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/bet.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-1162\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2ByocegGl6mf1g%2F1gJ8anHbRI%2FJSVNrX5yjEfiCw4QxC4koDEge%2FQzxt1B9hsxbycA%2F1rgVUP7NX0DuXF35TZ%2FxmO%2B%2BEJoWUX%2BJZyzlLeVRQkI8tNviSNcTJLbWOPnl0%2BPE2R2Jv%2BI4%3D\"}]}\r\ncontent-length: 4450\r\ncf-ray: a125b70ca826dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4450,"size_decoded":5173,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"75a03de442c6c7e82c985548c7cb63fd","sha1":"7cd50deea20d174037b8b7a22371318a7567dc8c","sha256":"09de30dbf65e351841059bcd4cc0af10c9942d32ba796456811518b8c50ab5f9","sha512":"9804179dbe319be653aaaba10724096b8df73711c987b957bcf95004b964f11b497024f714ff88adf7612ebeee402394120f92833657bdfbcb59a85da32fa4c3","ssdeep":"96:L6qXGJvmQWBxptBhqOqV9B7SqJ/LwqYg3hWywAEUa7cbqvPBuX4l:L6oGdOpt/qPWqJ/LwshNnkc8UC","tlshash":"61916b9a6a0783d9fc515db8391f6c08e4830d2c15535b21e3d7f396037f0a917a752d","first_seen":"2023-04-05T15:55:03Z","last_seen":"2026-06-27T16:09:51.815282Z","times_seen":539,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/mines_win.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.003Z","timestamp":1782576555003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/mines_win.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-f551\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEO%2F17ub%2FLR83zMPKCCrt4buu%2BQtu9qmMMVs4WX8dvdoxh5Ib8p%2B8Dg0qUDsWGYUqXQnR9ufAT7TQ2Ym1l%2Bif7Uy4Q5fx2pf6AHHzELg4rHZKCukF7tn%2FAkhk55MmYBpIoxTMpCHg5c%3D\"}]}\r\ncontent-length: 62801\r\ncf-ray: a125b70cc830dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62801,"size_decoded":63515,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo","md5":"d6d09a5458bc6246908902f140143389","sha1":"81a5f3054020caf15d8accc611547458c4a9cc18","sha256":"b3e660a9e691be170372e6e67f15fe24f31aac2163e250c02d8ae2bf3f3a756b","sha512":"e4dc2ee00ddbd3d8d0c95931babf0f77b0c370b0b2044c2218f6405e12eb46ec5d511c4e2eba5536d327a16bd343a696d6a65e083d8e13f294c06d7a8dd71e82","ssdeep":"1536:PBYA/TTTWk81NJy7rV0VpZBFcyl4ODweq1U:ysTmJykByYDwJU","tlshash":"3953f2b23fac7982f54ae5f0201186a43241ecf5867fe8963cda375f1978a2c53548a4","first_seen":"2025-03-14T05:32:35.540788Z","last_seen":"2026-06-27T16:09:51.756856Z","times_seen":129,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/1.e5b2345.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.029Z","timestamp":1782576556029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/1.e5b2345.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-637a\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJXAaLzPZMKWCqCKgo6EVLzTEDsVAzroEI82JgajbpjViTYOhbZof2EF79PXAczi%2FalQxpgAnt3KCt0srLsvkqKhtGwozUACIg68FCfX7Ji4eE%2B%2FYh3%2B49XACPO1%2BiebYFUaQuuwpkw%3D\"}]}\r\ncontent-length: 25466\r\ncf-ray: a125b7132921dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25466,"size_decoded":26218,"mime_type":"image/png","magic":"PNG image data, 300 x 108, 8-bit/color RGBA, non-interlaced","md5":"e5b23454ff3d853daf77025d7f31ab29","sha1":"2b4adf2bfe9d7b456514885cad13b96dcf337f40","sha256":"8e4212e06c3db443b969344a32da664a8e4d9565cc88e8b32b9f3bb709c236d9","sha512":"ee02726b23bfed5b0af0ede9b307ee205a887cad6f45fdbcf577ca15a4509142aedaa33626381657d21bb3a93d9b29673fbf694806a6890dfaa8a3d87a0b0b05","ssdeep":"384:bmAnfnYDoXR3kOI1xfeedjdvXQzXhM8HeOLVcszMd5WySDt0/VwX/djO5WQbsiI3:iAnv9VI1tOzW8HbVkrnCtqmdfGsiEcyr","tlshash":"f5b2e1059d34a111bdd5630b5e6e9aef61c34650d9f006398f218ce78623af581ccf2e","first_seen":"2025-07-05T10:31:20.153032Z","last_seen":"2026-06-27T16:09:51.779523Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/hongbao_img_hbd_s.9672377.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.050Z","timestamp":1782576556050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/hongbao_img_hbd_s.9672377.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-9b6e\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1N2IS7Kdq52zz9u78uj4JQQptImTIsfL%2FUvIvFCk3Sq6RdgE0XEZwz4GWj748JbW%2BnbmofB94RGHGC5gaD6KnlQCOvVWKsPv941EuVrfOGt94Tjn%2B4ZHv1AXSmj2IG0L2iNM1CQ6%2B3o%3D\"}]}\r\ncontent-length: 39790\r\ncf-ray: a125b713592adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39790,"size_decoded":40538,"mime_type":"image/png","magic":"PNG image data, 560 x 750, 8-bit colormap, non-interlaced","md5":"967237794d34b46b66affb61126b7d74","sha1":"e6188148ae172f1d37cfc0b5acae04543148428d","sha256":"2748d31f8157b931b791ef87c9178eef558a9ad4f90f3bcd21ea90c6012aa0b0","sha512":"1414349902b1df6675798fc8a54a0daa32178c65fea41c3b1f5e12c1408ca788888ba061a67fbff74b43a78bff7068cef3b103a903d26bde9b4c0a2076580f61","ssdeep":"768:pW0XXGeBD5XH4u59fm4jlKkMA4RjKbfvXsghCrv6gUPuKUnHX:U0XXGeBD5Xr59e4jcA4gbbhCtUmKUnHX","tlshash":"7e03f17298d80e32057f47d972eb17f53689ae16b371988422797e200b1519f1ef0a3f","first_seen":"2025-06-21T01:24:59.369644Z","last_seen":"2026-06-27T16:09:51.742577Z","times_seen":82,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet2.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.025Z","timestamp":1782576555025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet2.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-7bed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXm9P8yPKAPdvs%2F3niF0yAq5L5fuhfzNkpYkS86Klqi72UsXBCPojl%2BUHR57G6x7MYM9B0RXBGS8DM5sGa7SCkFe4AOksa4yOYArBYTAqE0rUaC06K87Zb8YIPGBuMeUf5oM%2Fn%2BvSGc%3D\"}]}\r\ncontent-length: 31725\r\ncf-ray: a125b70ce83adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31725,"size_decoded":32435,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"7224fc2b2541d928dc6388a4f78f0f68","sha1":"2b7af31749c35a919dfcea5af37b1fde634aea81","sha256":"b6a4797b7c9b8caf67f93c1005bcda4cbf27c94d0d30516cee57178f3749f94a","sha512":"8bcaebe2dd2acc00edb45d4b3b26597952150c2ae88af772cdaffc05f93ab1a2fd9f5c0250b789b45a3fe43f05a26e208a00083fb16a0c51c1dd51f7eef0ff99","ssdeep":"384:JLHIiLBote907m+mTZqp/i6diRfHHP2+74R1Ythmsz+pwe:pHIiLBoteznZI/i8mHvgY/nz+pT","tlshash":"b6e2bfaeaf74511cf0949bbeb34f27b1d584a6485e38f1db8b50bf8542bf9493b16200","first_seen":"2025-03-14T05:32:35.553462Z","last_seen":"2026-06-27T16:09:51.830063Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet5.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.036Z","timestamp":1782576555036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet5.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-446d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AodYRL7vu7nCMPCcm2NA2vJvRgGCn4UnkFBbOdAxLerrvIby8pA53aR1k%2BlcjfjO3BtUUWAG6bt8uf7yYYnlr3gjh4n1vnc31UbxKrfM%2FNHM9%2BxaUyqNUUcn7anAHfM3WXMXFWZPY%2Bc%3D\"}]}\r\ncontent-length: 17517\r\ncf-ray: a125b70cf83ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17517,"size_decoded":18227,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"bc989d28943f72ec704e32bcd8a58bb9","sha1":"ebac2016b9384abbc04d038fb2a64403b1e7a74b","sha256":"5947f9e22250436aa4e36c616194201b16d9e6f9f9b284a88be36c8f6d1b0ea2","sha512":"c285a4114415fa8d774ecf39204ddec7dc8fdcd826804510c663208fa55a61a5c255d20f94318b5d6546b697a91318288527896f640e8a12623f476441c8485e","ssdeep":"384:G6S8K2Li6rE0CRZb+0D50wnjhkRH7RtstTwUJEhCQN2iE:GV8VLiOEUQ5Dj07R+0/W","tlshash":"3672af55327a92eaf90b9e3515c6b7e0e1821dd03876dbeb1b0a7f0407b79c86f5804b","first_seen":"2025-03-14T05:32:35.551302Z","last_seen":"2026-06-27T16:09:51.81415Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet6.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.039Z","timestamp":1782576555039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet6.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-5aed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUwJqw%2B1tswNRIOLkGgjeNCrsFTa1l00acrQBlgjQwK9UEu%2Fdv9xoHCMKktfhdTTyWT3uPe21jfnZfHTu8MNVDMyHisrwcGqVTZvCMzzJRXFvYNshntV3KfOrz8Xxy%2Fi1fn1HizCsoI%3D\"}]}\r\ncontent-length: 23277\r\ncf-ray: a125b70cf83edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23277,"size_decoded":23985,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"c4270c1b6f3ececa17bc18a2120b281c","sha1":"d9176841f32a0e655214216bab7501de61eebbe7","sha256":"8d466cf814e526b916c374b1a004197067027912196467e4bd6a8dc1fb52baf6","sha512":"6d597004c8e4b3f38a2286680f8d7682334c34c5bdb894803a2f0d759e482007b11fb8c664e2fb49721eebcac5cd5e8492e187eee397cb7acc6c7ac199b8bd0c","ssdeep":"384:9XU7Sn1nDu/eQXtmNMWEwwSLUacXXzMrJ4XlJfHP5i1lDNOlM0jNwPTr9AxYoz9r:a7S1nzQXWDwSUtX/fHBexNO20jNwrrD2","tlshash":"a3a2c0df24f716c8f65d5aff06975c98e8849939493770c165f1ab80867336e8b32508","first_seen":"2025-03-14T05:32:35.518934Z","last_seen":"2026-06-27T16:09:51.812696Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://server.mango-cleopatrapg.com/","fqdn":"server.mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"104.21.32.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.561Z","timestamp":1782576556561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: server.mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mango-cleopatrapg.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dn1wB+5kE3TPVOisV1SL8A==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 27 Jun 2026 16:09:16 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: 3cU3mfa47I0brJrGmt64MNW9kQs=\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7JK8kCzGudHcWEHPILVMRbkndYRKhaYbzboZmuGU8zbhUuWi9DmQ2GrXwHu3xwD241YZOweOuseLGsLmxUi8sT84HwddBrijxolsO8E7uTeC5wg2VIrLJeVORNLldhoUJJSWjMn4mAj3p6uzdzKG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a125b716b9f40b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1104\u0026min_rtt=1086\u0026rtt_var=337\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=3221\u0026recv_bytes=1319\u0026delivery_rate=3208226\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=31cd4f655ca89248\u0026ts=380\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":17,"connect":15,"send":0,"wait":366,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/manifest.e61513f66dddc6ef7155.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.245Z","timestamp":1782576554245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/js/manifest.e61513f66dddc6ef7155.js HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6892c529-31f\"\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 28 Jun 2026 04:09:09 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AIee80NoPO3RQVyGkMWP1Jr22KlWhCKjr5ZHbn%2BcwHIooZKCPyMJiCEvwj1%2Bp2GGvT9i9GDYg%2FJstlBO%2F%2BQ0wFE%2FWDHdATrCm611WAEwwsJyGXkPx5YIOVCXDQ6P5rjzwMaGa8dQys%3D\"}]}\r\nage: 4\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a125b7080f54dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":1203,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (799), with no line terminators","md5":"40dcfff9d09d402daf38b8a86518deeb","sha1":"52f6686ddfa8a8d89f384d69974fbb5e2ba81a28","sha256":"1a8162403bfffd36e97c3d0d2f07f8bdc2fc5e65b6638b0d8d951c58e7f95327","sha512":"475fa72942be0807dc7254399a7cb17a21837f7f6f4bb8f66998347683ba0a9058ca8de756b8d0e94c955b3c9284535baaa271d373dabb8387edd9190780439b","ssdeep":"","tlshash":"a1011ed737a2fcc21362287c093f5089f2796914062eb881c749a06a3d7109680a9fd6","first_seen":"2023-03-07T01:10:47Z","last_seen":"2026-06-27T16:09:51.83977Z","times_seen":485,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/colors_win.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.987Z","timestamp":1782576554987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/colors_win.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-20125\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXS0SJIR7XaSW1iISwvMB0mMyAvwrRy5iKad8KtMSZkHmFMTxEX9gMqdL1sdUOPlZoZ1djFGGKAhn1gDZbUVJk%2BjRUlolRD1nnHKMaT7jHClzMbsbJ03J4A6lqrvvv1C7YuKV0VzS%2BI%3D\"}]}\r\ncontent-length: 131365\r\ncf-ray: a125b70ca828dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131365,"size_decoded":132073,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo","md5":"daadd24e39a8ab78d1ed7d55433d8cb1","sha1":"6e3f3ac09518b332d8711a8962b2a8c01ac8a9b5","sha256":"6815ba8f6f55d90a420f503f3c538a0cc653e5de38ede40a237d2b8a4d569254","sha512":"0b29d42f14f8483ef37d4fb46932ab4b84d7bbcf20cc5fd4f58f70103cc00461cdd2ea2318a8b5f7b1d38f8000f56e2c14660ff15dec13e84cdf7fbe0be3f576","ssdeep":"768:/7yR5lgqZ0FBNm/jpyVcUekYOtEmOfOJTrhJyR+igYDxdIUAn6Cg:TAdZ0PuVkcUekYOtRPPjyR+KDxtA6","tlshash":"f8d35ba117331cdee34966ba7a3ba321bd47ae65545c49c6833c03234ff1782af265b4","first_seen":"2025-03-14T05:32:35.545179Z","last_seen":"2026-06-27T16:09:51.746068Z","times_seen":121,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MVVVQ6MF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.252Z","timestamp":1782576554252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:11 GMT","end":"Mon, 31 Aug 2026 08:36:10 GMT"},"fingerprint":{"sha1":"0B:C5:65:06:DD:0F:AB:EB:1E:E7:97:52:C4:27:4E:58:4A:36:E4:7C","sha256":"0E:AA:42:5A:CD:B0:51:92:3F:AE:F6:35:E6:BB:66:30:A9:D3:23:7B:B0:56:D8:00:C7:B7:6C:67:06:C4:33:73"}}},"request":{"raw":"GET /gtm.js?id=GTM-MVVVQ6MF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\nexpires: Sat, 27 Jun 2026 16:09:14 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 27 Jun 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 116315\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324099,"size_decoded":116965,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4612)","md5":"c8c92e52bfb8ce4cfc13675283e630c7","sha1":"3baeda27c5f314d283ba82350d22058e8ce45af6","sha256":"92342089fe74c9e8590a5eccb77e81dacfbb0b072fd02496061c319cf69c08d7","sha512":"24c530b27c4a5f952c397ff6a11add57369993b2222d32467c76249171c69a2dda170936939bb2abc25e47ae35bffcb2ae1b37fc2d13bf8682c211865f207632","ssdeep":"6144:Vfmk0EU4tdNbyX0ka/A/ge1CWMHc5n+Q/w:Visk86fI","tlshash":"8c64f8cdb3d6746283a3a478503f014ba23a79d2f84cc898f186d8d46e746698277f7d","first_seen":"2026-06-27T16:09:51.715477Z","last_seen":"2026-06-27T16:09:51.715477Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":2,"connect":38,"send":0,"wait":89,"receive":130,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/fruits_award.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.012Z","timestamp":1782576555012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/fruits_award.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-ad6d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=27Tulv1CGYlgS5tXXtnkgn1mhl9xY1uzkzkwdGH3q8Q4tVUDVPGlJ4hnLkVI1s8%2BC0gz0oKebqYaIsOa3jLUF00IwX7V939br2ftfZz2tOofIyxgcQTheLhAhDe2sb1Q6KNV38aRL8A%3D\"}]}\r\ncontent-length: 44397\r\ncf-ray: a125b70cd834dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44397,"size_decoded":45101,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"76f48e91a7c1a39df6992bc91e663eab","sha1":"09604f900e161b9efb49663688915edeeec2688c","sha256":"1b90a0e1d4cce4e4f30528ddbd4fee1e364b4fb09bd0b2243ef6b6d5248d104c","sha512":"1e9223063622a4146a9e95f3179e857eca3feecacb554be613069b71826e03b6e7760edb5e1a18f7223b84cb41f8b5e351ed8af57255cc065a51146b3b8b6978","ssdeep":"768:2HEJKU3qIw10exFHmWre3496RSsr4hByuKDKj+cfwLJAH0oW:2HEkU3zWC4kSRBrgKj+cf9W","tlshash":"5413c04aae71015cf0d39e7c926f9270c0a5cf082aa1e6ce97927fc518bbd567f23600","first_seen":"2025-03-14T05:32:35.548837Z","last_seen":"2026-06-27T16:09:51.840293Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/video/jdb.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.080Z","timestamp":1782576556080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/video/jdb.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-7f8f\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhPmc2QiRoTSM7xk9RVDtoq6fvhtKFa86xGuPaICzsFRg8oetigy9MR8kKFjs44H3W91FXNmGnpe5LC9qIXSA8bcT%2FpfYdhom4j7NGrJNCk9g9nrEIWJELBxWe2IHh6g4%2F3VSqLjzpY%3D\"}]}\r\ncontent-length: 32655\r\ncf-ray: a125b7138935dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32655,"size_decoded":33358,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a33ed4c54fceb07f8d55974ef0b03436","sha1":"531aa097126be91e19fb46078dd80c18c3207409","sha256":"ba82ca8a41941bc1b01c9dec09bdf92912a6295d5cc682fb9a85c8c62b098fd6","sha512":"fe44062eb4bb501e3fe4dee4bbc6e79b5a57c6e67de5faeb1cee2adf009c75164bb8a56299456e3cccd78d9e9b0db61ae83a3e1985b3554574ba13d2a3d93ecb","ssdeep":"768:7bV5BeuekLQWd3AqPhHrWIqNpDoeQ0cT8gZP8oTiEao3:XV7MjqZWjjcTnF8aJaU","tlshash":"f7e2e11abb3195d7f0322db86784b02b2b8f15bdbaeb40154ef2e17edc958b55162c08","first_seen":"2025-10-11T10:32:16.858296Z","last_seen":"2026-06-27T16:09:51.81792Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/?isredirect=1","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mango-cleopatrapg.com/home/game/","date":"2026-06-27T16:09:13.831Z","timestamp":1782576553831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /?isredirect=1 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/home/game/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 06 Aug 2025 02:59:52 GMT\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MyoDixHHAASnWBfNvrKiDtiqx7lFAzE4Eoeg%2FSqSGrORxBw25vx5bilOuhYjFjrjAHyWwIa7BChWA1ioxHCSpkwlweS73BBF%2FKvU648QNpecVLHJGAlqiEXXzeD3G%2BzJgscggel2ec%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a125b7057f07dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":47398,"size_decoded":15832,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31675), with CRLF line terminators","md5":"0504719fef86b4700e553f6afc7950d8","sha1":"eff28a8fbfb57652c980d629e584a7858d2ad75f","sha256":"11291e63798e72ebafe0085a309c257b92f6ec5abd994127ddeef19c33d69087","sha512":"0bfb6d7580a6a2dea23dc8bc17152edca388b1bf28ec0aa7af07795705ba5af13f1a7787caefe7377357bd4aac7291eb42cda9ca148ef6c23c2b7bf083ea6982","ssdeep":"768:DbIGgUJrMzMntziGW4gFNzi2zlyA33nTLKtKckEsit4a1SomLem:AGgUJrOMnAGNGiSv33K54gM","tlshash":"f323e7fa197863ec1827536c8b76f444933e10fb31948058bf8d4ea88f67599fa53e84","first_seen":"2026-06-27T16:09:51.717694Z","last_seen":"2026-06-27T16:09:51.818532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/favicon.ico","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/home/game/","date":"2026-06-27T16:09:13.841Z","timestamp":1782576553841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 06 Aug 2025 02:59:52 GMT\r\ncontent-encoding: zstd\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhry9fMOpZqMZNYZBypKa%2FtQ2Emteadah%2BOxRKX7gTQUHc7S1PUUVXGjTFZmHV8zQpTBChdo4JAnsWg%2FHTyOamM5ZPj6w1o1YTkPTwfJ%2FCw9cGQzlmfZeByBYUQ%2BLc845QGeykE0T7M%3D\"}]}\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a125b7058f09dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":47398,"size_decoded":15865,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31675), with CRLF line terminators","md5":"0504719fef86b4700e553f6afc7950d8","sha1":"eff28a8fbfb57652c980d629e584a7858d2ad75f","sha256":"11291e63798e72ebafe0085a309c257b92f6ec5abd994127ddeef19c33d69087","sha512":"0bfb6d7580a6a2dea23dc8bc17152edca388b1bf28ec0aa7af07795705ba5af13f1a7787caefe7377357bd4aac7291eb42cda9ca148ef6c23c2b7bf083ea6982","ssdeep":"768:DbIGgUJrMzMntziGW4gFNzi2zlyA33nTLKtKckEsit4a1SomLem:AGgUJrOMnAGNGiSv33K54gM","tlshash":"f323e7fa197863ec1827536c8b76f444933e10fb31948058bf8d4ea88f67599fa53e84","first_seen":"2026-06-27T16:09:51.717694Z","last_seen":"2026-06-27T16:09:51.818532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/fruits_bgm.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.013Z","timestamp":1782576555013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/fruits_bgm.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-5dced\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BccwZmqcZx4pS7IUKleKZxoBzwmllU4Ah667lvHvQ%2F5gyeH3xZjvXgsQhR%2FaAb6flSdbpXmaoDjJXRnRj2dCkPjHX47GuLo6qx%2F67C2FRsSzuaKjCh%2FxwaRR1FHqcIJPSbPfDiayqAU%3D\"}]}\r\ncontent-length: 384237\r\ncf-ray: a125b70cd835dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384237,"size_decoded":384949,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"f1ba33b19ece083a82f9a1ca32b2ebde","sha1":"69233a3e9fc340d15985ef31c553a978e0372f57","sha256":"e9ca1f495419a14834c8486be7e3cdeca2c9d72813b52aeb2e7b9155698153b2","sha512":"9f1d723c9edf152b6bc2162dfc7cfe9942cebfc42ca3fa7725cd7ffe7f8c2804b04e475418923aa592e9f081662d707cb5563c95cdc7d5d9cbb8d78b80f7200d","ssdeep":"6144:Svg6dJJugjMryHqFT5Lqvfo4NqnYRiheIBqHgxRCIGa4Ph+vOuteP5eFdYpOE4Fk:Sygo2IaxNqnYyT8gxRCQ4MDwhez5PH2H","tlshash":"aa84231113769490e7e5fd444f5f6a79ad9b5ee9238ae0d6c881ff00dcfa828393d940","first_seen":"2025-03-14T05:32:35.541633Z","last_seen":"2026-06-27T16:09:51.829102Z","times_seen":121,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/4.19aa740.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.022Z","timestamp":1782576556022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/4.19aa740.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-364b\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7F%2FVpV5AVkczYPBLRvSVIcFThcId6X28xLKlj%2F2ANotTl3nU6J%2Bv28kLdUZV4iiMWurmfqK8rIjaqkjyiwXWpE18amxnEjk4%2BvGEvVXkNtyHKparV%2BkEgAGnwyC1uKaAqttJFWvoSI%3D\"}]}\r\ncontent-length: 13899\r\ncf-ray: a125b713291fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13899,"size_decoded":14649,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"19aa740c693b8696f772ae73613d8739","sha1":"51c9834ac120762ce93604c0a941d5a2857c057c","sha256":"2f0f9f2bb53bd18c03aa84de157ef3d3d6035432e01893714cee7a471f928ebc","sha512":"8203f5acfc8c978a2aecdeba7451861f2632de7c9637f2d4312968879d269eee42a84ace5dc2fda9ba11e5487df60b44a3bf1d0f177856d0fffcddad1f85bc3a","ssdeep":"384:UpgbrS0khv/8pLuc15T8l4Hf9hxbOCcuGtTcXgp:7Sx8tu88WvXgp","tlshash":"ee52d0c89e3e00e55f54cbe99852c9ca4f7916860ef2e83dfaf64d074519b5e884f1c8","first_seen":"2023-10-30T05:39:19Z","last_seen":"2026-06-27T16:09:51.811567Z","times_seen":38,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/cq9.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.078Z","timestamp":1782576556078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/cq9.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-97d9\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2Cm27Il02b1uV18LppCYCNnEitLgGga%2B65uoyANYFhRLwecS1l%2B0f7lgodQZHgmsq9Y6FCogG2O1th6l0mT8JoGbYuDcONHUnnk8eucfTffhX4FLdZji5ZbEWC0ohmu6C9LeVNwyqQ%3D\"}]}\r\ncontent-length: 38873\r\ncf-ray: a125b7137934dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38873,"size_decoded":39576,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bae2b2f887bf627e49cd9abc6ff3a1f5","sha1":"d2afac7ae0a1b4e0b0f1c89d4e519829e066db0b","sha256":"3385e40c8b0c6e9d5724810027f6a81945c073f00f3d7703e3bd935a3042dbdc","sha512":"d38b6909df7b129d1679a8ca45633bd88dd71bf820a1d5f0a77a0302486bbb53aa2b7ea8a6ddae10bca7b806c0cf581a5004fac05fcc3164ad4733b26fde86e1","ssdeep":"768:A+HkokT4yeFQHh0FQPpWR4IAgiKW/+2MbNFvmbwVtQ:RHkVkyNH0QPpfIAgirW2Mbb/jQ","tlshash":"2603f24b22a8bba5ca412cb0bf21891679dac1b051964cbff26a9e13b4f57f4570f017","first_seen":"2025-10-05T13:22:44.086809Z","last_seen":"2026-06-27T16:09:51.771631Z","times_seen":25,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet4.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.035Z","timestamp":1782576555035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet4.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-51ed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGjQpDiK%2BiIX2gkp6dLHV0i6iBytMh1rFAM%2BK6WDwDr32T%2BaDmcKk0zThaWmwgH0lxNd3Npq8L1ImnI0k7D642CVofXE9eqF5HD2jOt8pA1gY%2FDw9g5x4ezYOUP6OuH5aHNwjGu%2BXgk%3D\"}]}\r\ncontent-length: 20973\r\ncf-ray: a125b70cf83cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20973,"size_decoded":21685,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"0d5f940ad30f80a2ba26a724be051a46","sha1":"ef1259a4a88dd14ef70d0b50d325778ed338a431","sha256":"58aa1962117a3000051e7f0a87bbda5901d2673da16ad86e5708dfe4a6070a2f","sha512":"af60f3511dd72f12bcc7f035dce70a760905b23b714de43d05b1a3595edeb5c912094a879208c1ccec5e763265715761cd1e2296207adf10353a45cdadea356e","ssdeep":"384:v1myOyJ2IBEQV0286tJ0v96L9xdPvdb/w0Mfiuj:vYyBHTVhXcOdy","tlshash":"fc92df2d4b766e32f098b8b331044071f2561b7a6284f9c3fe25bf288a775498f9e152","first_seen":"2025-03-14T05:32:35.55633Z","last_seen":"2026-06-27T16:09:51.822949Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/customB.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.072Z","timestamp":1782576556072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/customB.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-7422\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmffWKvq6sB%2BxjBf38%2Bi0FQLW0tbKhLYXAJCrgTNYFGjV9on2X3AvZCyG9rL2X5UZAdTMr%2BT7yX3GMC5wdqckFS7gu9yDbhtIgD2Zhew5NjOAM9TrDo%2BDReczpzAijTrxsbM%2BeM%2B%2Bjg%3D\"}]}\r\ncontent-length: 29730\r\ncf-ray: a125b713792fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29730,"size_decoded":30443,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"da94b340fb20d44fcdc5fff914da24d8","sha1":"a79c1280eb1e449e22f6d5567a12dae425371002","sha256":"973ada3ef031abc3a27516021e935c641c84a9787fdcbe162c98f63f24ca411d","sha512":"d402dfddac20bf596070bfc1c9b659c5b6f893116827c0db33040deed2fbed1dc5331b45693307a6e23adcf9fe0d2e84a3028f76db0ae47884621655ac50cc5b","ssdeep":"768:Hv5hFgwhW84DFL6Xvh13nFtiqtFYEwqc/0goXlO:P5owh2x6fnzXtFYHsvXlO","tlshash":"4cd2f24c267e45a6ec1d5fbab7faaf1038c19198da305a846accc378571a193022ef40","first_seen":"2025-10-11T10:32:16.84127Z","last_seen":"2026-06-27T16:09:51.744252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/jackpot.21bbb80.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.992Z","timestamp":1782576555992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/jackpot.21bbb80.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-6bc9f\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0UOt4nrixjmfp2nBoFEQo9Q8rTVD%2Bp9VFVrcwJud0L%2Fc8trlr1jjy8t4Fqg4EqkE7j9f9SqHyWQ1thrtRBgYPSpmFSj9z2sbA7ZlA05RWnbjDTAiaBxYhwJ3PR8CPk%2FVTqxKaWgLms%3D\"}]}\r\ncontent-length: 441503\r\ncf-ray: a125b712f904dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441503,"size_decoded":442251,"mime_type":"image/png","magic":"PNG image data, 1140 x 270, 8-bit/color RGBA, non-interlaced","md5":"21bbb80d889efa8195ba1eaa121daac9","sha1":"7eed39c1a3d2dba712bce8f18bfb6f4a9f3dc5d3","sha256":"527ae70b60393e09f3b23a00772672a7430373ede80f99ed3f9d365b46401c13","sha512":"48d1ed561a3327f36527231418a929563a2838b7a3bb588ba3252628ca12f7f60545bdec58d65905360fd28a87c0ee8e82ad052d026c2eb5fedb42ab0b9ecef9","ssdeep":"12288:D4gd/DzoXf3Fgo7TlBwkSpxHXikJDgrawErYNSXbxcMR:D4xTlBwlgr/EruSXd7","tlshash":"1d9423eafad06ed7e4eb3b4878d4765807c10c4d926bc460e20bddf611d58c1c92b6ab","first_seen":"2025-04-19T15:34:35.405516Z","last_seen":"2026-06-27T16:09:51.773234Z","times_seen":33,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/circle_ding.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.018Z","timestamp":1782576555018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/circle_ding.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-536d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEDP5dbHQ10UL60mFA2rYUWXK%2B%2BYtcUcOFrMKRcV2aqtiLql%2FUr264rSbYst9sZ2BM%2FG6%2BCXf%2ByeamEcaAuBBOwco%2BrXpNEtT8xnb01MVshtJSSnsQq1I1Ye0d1soyDVH7J76uMn0K0%3D\"}]}\r\ncontent-length: 21357\r\ncf-ray: a125b70cd837dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21357,"size_decoded":22073,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"adf7dc16cb6ce8b25caabe4acb31b27a","sha1":"f6df5716223b596e48ed596c4d1ae7ce8d8afa3e","sha256":"6d14404be0e45f8a790720d527884777c8abf0dafab33169b8785f957cfb5c4a","sha512":"8754be516caf8bc08f0e26cc0dea6fbaf47a029d3c6d92f854a3af939aa2b9269f942dbeb24cbf5b192ece3777dd12c8b61046dde63f245e777bfa440339749d","ssdeep":"192:MLd/Enr8J5YvBsI4K7UY5KXTlkCkZmX1vTN1EZPZpP1gXzKaDMq3+gRtwBBNJDe3:Mgq5YCaCbhX1vj+9+zruMYBNvnq","tlshash":"95a24b8b9fb0501cf4a61fb963af83b0c20dda4a1f64d29f77a2df4251bb9145ba7104","first_seen":"2025-03-14T05:32:35.542352Z","last_seen":"2026-06-27T16:09:51.778733Z","times_seen":121,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/68_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.576Z","timestamp":1782576556576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/68_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-863e\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAQI8gozcA5r%2FYu1Eq%2FfbDHJIugyv%2BI4hoCR6NzAH184JnjIopUIz7mpXURuhUp%2B9cVdi69i3EJo3obq8p556J8jphOOM0roVfvPMl5PEOR4LELKo4wTc%2B3R2Cmeza4MQG%2BjkbZdHys%3D\"}]}\r\ncontent-length: 34366\r\ncf-ray: a125b71699b1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34366,"size_decoded":35077,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cc85d56d2c127fb7525cd944d684e408","sha1":"ac49758cb2bb1395010ab4474ffb95d6071ac6a0","sha256":"f16ed066178b5dcc1d08afc13e2d68da4efc1010a14d55ec495ac01ff673785a","sha512":"aea08aa291b6b3c6f351ff74a8182d938b04c75df5393adf099571ec89145995a0337953be5a39bd4233aaf919aae196913570737585bd67ce4cbd9131eb88db","ssdeep":"768:xLL6pX34ObTrqjWEuu+bvFwgsBMogbGA9tO0E7EMklfu32B6Fh:x3JOjqSEulvFwgnohRz1Fh","tlshash":"86f2f0cd3107e607d2522efc30aa02c32775e2968b487bb05a532d32abd3526f1549af","first_seen":"2025-09-26T05:22:37.241926Z","last_seen":"2026-06-27T16:09:51.748455Z","times_seen":53,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/video/sb.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.083Z","timestamp":1782576556083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/video/sb.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-821f\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXhbJCqyn%2F7DYaw4k6gqvpLqg78yXPQGs1xqpv4XF25Jg6iQZM0ZykC18YlmwylVMw4VHxIxjcreksyMUlfyyUDjtJ12BAPLPgsiv%2FyE%2F7JYxkIN8NEREVQcxFWhUegyxDjuiRnaI24%3D\"}]}\r\ncontent-length: 33311\r\ncf-ray: a125b7138938dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33311,"size_decoded":34016,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06e4af24a11c77ffce77ea92346560b2","sha1":"6fa8e9981e9979ee9cb264dffc5cc1bc34130a76","sha256":"d2dce0602e137620e1b8aa375fccaac05b24db39cc995704b1ff4c083bda88dc","sha512":"338a0106ed36aad23915b15c83eef6d8bf85097c04a19b4f108d04d1bf95f1ca97dd54f595d001372b7e8f769670c89218234ee30d22a808c6e4d3e1506247fb","ssdeep":"768:m47yngXeCFWp696rsiRIdSjt/Jhg5OAmae31qLjssshuy:m47jFo64r3Z/Jhg4/3qPsVhX","tlshash":"b9e2f1272dbac386d0cefe7f08ef0a561ba9d84d1213b41f25c9d89e86e1a58c3104b0","first_seen":"2025-10-11T10:32:16.869467Z","last_seen":"2026-06-27T16:09:51.750471Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/configFile/xiazailogo.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.001Z","timestamp":1782576556001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/configFile/xiazailogo.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-1072a\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbukWvo9Zv6Wy4OIGCo%2Fk5R1%2BX%2FIazrzXy4%2Fv6ljf2TsAN2Ze4DCa2NDUjAvf1TuOjF9JKGTTOp%2BHIea9dxkmM5zJbKisOmn4OGc%2FZOd50RSrGQXQo095bxcaWN%2BDEz%2BH75S400xURs%3D\"}]}\r\ncontent-length: 67370\r\ncf-ray: a125b7130909dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67370,"size_decoded":68086,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fd5c64fd9d018090ce419f4760bca2fe","sha1":"26c8314fbc02a37173fbc6aef19512983073356f","sha256":"8136a05e4317c1e8849344c104ed9cd5c63d96b32ce76e50faea565933f2e160","sha512":"3f52fa06e64c0bf441fb703c0a9c623f3ad0c4ed72156d10a631d19714e0ae4d513d519941dce10a3cd52c96f56ee641396da6197b302e456ff9f84dc1f73e26","ssdeep":"1536:iv8BV/AaQgYY69Ri7rp8d5u2rx38EILKXsC:K8BhYY29d531B0C","tlshash":"7963028b9c966b6ee333a07821033d107e395c419123572fd6b797565647bf7a37006c","first_seen":"2026-06-27T16:09:51.724587Z","last_seen":"2026-06-27T16:09:51.75526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/js/vendor.a381bea070078c8a0258.js","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.247Z","timestamp":1782576554247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/js/vendor.a381bea070078c8a0258.js HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6892c529-2beadc\"\r\nexpires: Sun, 28 Jun 2026 04:09:09 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pjd6TccxEwRRiPsRgIZwyroNECybreTPiDFndKbqL56zX72x6HF7qUxtg6%2BeYIp%2BLijHCJa%2BL0LNuDoNRGicGEUDwAvAnmBYttJ4pqz0FxTyjAkmxLh7AQxWz49o%2Br8grpAAkEfsrpY%3D\"}]}\r\nage: 4\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a125b7080f55dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2878172,"size_decoded":842800,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50261)","md5":"402a462fbc8c817c7298baf06eaafefa","sha1":"ce6e1edfa034ad1bf9f98575b26b29c00541e50b","sha256":"33dcf234dfa63d5ccdb460fa063a6e6eb776216201915fb215ce6d59b046f530","sha512":"219d2162949231d9a5ac352c5dbb899292b65abcc065d404911f72b38e42aaabadec58e926d358374bc164fd7b3a616c226220d29803a5703afb72dfb0fdd986","ssdeep":"12288:sx1zwM0GNVMkr8Ba5sGeomoDfglQuqmQGWCzCi:sx1pPVMkrD5szLofgDqi","tlshash":"7025f9d9b285b031439760a0403f150bf23b695cb40e85a8f675e8ea6dbc98d613bf7d","first_seen":"2025-09-22T17:03:15.080576Z","last_seen":"2026-06-27T16:09:51.810388Z","times_seen":102,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/play.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.075Z","timestamp":1782576556075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/play.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-7a55\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkDaFPuxXOQ2tvu8z3pe%2BoAFkNLehlv7VF5NfBI4HkZOThcjeXn3xqaXYbD4vDQzFx%2FWN1KhPjonfJmW9ZMg5EsLAyJrAuHUd6UNjTtaquB3Tpd8EY3iQDD27P223NXHnm8IcyPnrZs%3D\"}]}\r\ncontent-length: 31317\r\ncf-ray: a125b7137931dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31317,"size_decoded":32020,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0a18b85d68b22dcc029347439022bf7b","sha1":"ea35ec258c18c9794bc94ca9f3095c9e7b82b2a4","sha256":"5840be5594b299aa14fa04cfd2acb302a7f4bf14808badc1b793fd40d6a9a793","sha512":"29b97ad4d431f292285f548244035425ca98c33c60af6cd868b2dcfc80609cfd313374b44c75f1aa2c868a743b6114e792590b3dc28062420800940c86ea21cd","ssdeep":"768:QSaHbmh3sVgPg+dOzqPy3PY6F0UgLZMTP7aiMtf3fvkRa:QSkihUgtdFMJgLZMTDaiIfHt","tlshash":"c9e2f168b09150b3cc1e6d7b79f648181fda5585816c2f251f0cf22b663dc8ba9027d6","first_seen":"2025-10-05T13:22:44.056447Z","last_seen":"2026-06-27T16:09:51.814776Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/configFile/loding.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.018Z","timestamp":1782576554018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/configFile/loding.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-6406\"\r\naccept-ranges: bytes\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNiVWYObcU6uvVodhyQ%2Bk4Q5gIzttTKvRv4H%2FiNvyQ7deKDJLwxiKT5Imspl7AH%2B9Qe29lk9i0Mt0WQKDQUcPXIfonMsHWDCDXBXFZh6oFGNsHKapS%2B2%2FSbq02tuDQDGz0EVsPZG24M%3D\"}]}\r\ncontent-length: 25606\r\ncf-ray: a125b7069f30dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25606,"size_decoded":26315,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"274e1615dbda1debdabb0bda34b4ceb7","sha1":"cf94b7ed59141429a6b85a4abac354774563e346","sha256":"fc9d3610e2746e23a8507c294cc127edf05e54c59c8d85d42b10861f81956741","sha512":"fa437d29ae6e7f1b35c535d73b38175d056e226eb18abb2a7998e6919a6ba32f16f5f6e70157aa9dc82e7afbbceda174bf43acd651616cb25c2bfcb56735023d","ssdeep":"768:v2s/JDvP8EISQlOOssJIPSdnsL0g09xjbR:v2Iv0PSQ5JBdnsr8V","tlshash":"d0b2e10a2707e181f7610aad6b4305ccf423f9579326daf74ba032572d5e93eb503ac6","first_seen":"2026-06-27T16:09:51.726556Z","last_seen":"2026-06-27T16:09:51.749603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/colors_win_long.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.995Z","timestamp":1782576554995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/colors_win_long.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-24344\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bq5XEsmhNzP4WZhbx3Ix8fOAMAqhocE987lY4IQwuamf9GmwB1DHxk1t49xPfMfgt7EFlRArIL1cMjCTqikWdGc%2BQrSnqdR2oiNk0tadSsXvIqA3zjr71ZNngJsFlVdLtVblyb9adc%3D\"}]}\r\ncontent-length: 148292\r\ncf-ray: a125b70cb82ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148292,"size_decoded":148998,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, JntStereo","md5":"8364660a02bb397dd4a07ee42765771f","sha1":"7681c8769f73e20ce9921be71b2280f298afbe5f","sha256":"5bf0d9526f12f1ea3fd1af335bc640f5e7f7a6680b5019695555a4e110989015","sha512":"9532e1eb067606d7e44745e194f991eee8874e087ec139be88b09f0578e7dac7f5c4243b0adbcb60b26efa7dd16adbadf5d6f85bb6a96a709cfd3c904a0bb16f","ssdeep":"3072:6MsyRZaghSkGJGCf5Pph/XKP+iZe2Y20+9uGlK:6zg8eNC5PpBaP+iZyg9u4","tlshash":"7de302013bf3ce58e41b947aba8f770f1e17ad2123b3a6d25e0b23354ef1585a944396","first_seen":"2025-03-14T05:32:35.552778Z","last_seen":"2026-06-27T16:09:51.740659Z","times_seen":121,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/tada.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.074Z","timestamp":1782576556074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/tada.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-4c9e\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8C1D%2B39WT8m8cpu1j8CmbaCelzmaRR%2BIemlhr3qvSUSkYJcWwVxs0RTshg2GugsqNXISclAQdoFhe0qLu2SByczR%2BlEQUDpvxINq%2Fbu701llThRjORjfxEWGsGOT7o0%2B9KhOgT8rX8%3D\"}]}\r\ncontent-length: 19614\r\ncf-ray: a125b7137930dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19614,"size_decoded":20323,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b99d668572cdb14ebe3f99127d3a550a","sha1":"83f1154880f0f3d3f1b684bb279152ff8f6f7476","sha256":"a2ecd1d16a8e76080b4c33f7d452522a75006fdbd768b1b6c548f33d472c99a3","sha512":"cad88da3eda767a0886b6ce06c136852d89ecf041ee8fcc4c754ddb20ddc13557142171b7a513a8d44219771caf00ab295d3afd89dd14d2c87c74f059ee62614","ssdeep":"384:mBh97il+m7TT5JLA2rEUvQXZMeqABfrZjNJ5xQNF+dRL3cjbV:wq+wTHA2poT9BfR5i/qN3c1","tlshash":"a992e1ccf1199457e56d28325c71572023458340dbae3b8a273727b2b877078aec1aaa","first_seen":"2025-10-05T13:22:44.052046Z","last_seen":"2026-06-27T16:09:51.817106Z","times_seen":24,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/jdb.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.077Z","timestamp":1782576556077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/jdb.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-72f1\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ill2aln%2Fz7AkBhajfcRz%2F%2BxvjT1zrmVTu%2FeAkz9xGoF9zF5jrUFs1nR2sYeHdtxS9tH0iWHjQVr5DbJ%2Fo5ju0mq7kZSW8LHt3zPSLjvxNnKKf0OIlwZZjyvxBIoE%2BbvQCmLqBekJGiY%3D\"}]}\r\ncontent-length: 29425\r\ncf-ray: a125b7137933dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29425,"size_decoded":30136,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"648ba9d13059404d2c543ddf5afccb6d","sha1":"fac68e6beb1328b7d5b815f225da4e7d2eb5b1e3","sha256":"52d3707a3316324f433bd6ce3ddba4f6591c4aacd27a8905607fcad25a3aef13","sha512":"536e474fb2499cf8fe311c3710679f9653f620dd333ce8a4d30e5a43cf7367c224cd5a2034f14534e856d06a03c202bd94f92062f91b5deb7e9062e3907cf418","ssdeep":"768:1jDwbyiBqNUJu4guKgYrYx3YXQp70mehBm7K64pV+Y:1HopBqBM1Y4MD0Z4L+Y","tlshash":"6bd2e121f5e72290e38c1c3d40ba3b124e5a207b6b37f23de621fa5b4505e948b50bde","first_seen":"2025-10-05T13:22:44.120876Z","last_seen":"2026-06-27T16:09:51.753104Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/ActiveImg2.4c26207.gif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.447Z","timestamp":1782576556447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/ActiveImg2.4c26207.gif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-22473\"\r\nexpires: Mon, 27 Jul 2026 16:09:13 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn1xA%2Btx%2FrO4cIVhyUFidLGJ%2FnBKajRmW4svdynsdTJ0nEZ3fbxCFMff%2FsEZ%2B76EeGGI7oEZkSYSKBAkb84pi28kOy8eC82sBilnKEcv5Mdc5BkkBDcTrMcEmVY63RLP4KoNoZcnhF0%3D\"}]}\r\ncontent-length: 140403\r\ncf-ray: a125b715c999dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140403,"size_decoded":141155,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 220","md5":"4c26207e3ce312ec84489ca19f2be993","sha1":"65ad01ae365a33a79d87435a69cbd19c9568aab4","sha256":"4ec6e12faada91e00ccfd09231436efa8c2e458d8900e9c673a071e164503f0f","sha512":"0479e8793754b94dfe506ba92701cfffa3a543233fd9a280926f89eb445f76c5819a454afaa54b113599d00b9b84d69bdb61887ee3a5e3ceccc6c67ed3cc4830","ssdeep":"3072:CeThjAl2nNzveyO/WGVwbhlE9nV7pOwjZC8OtbzLJwlVhWET7fDschPXEu:ZjAl2NM/OhlmV0wj6BzLJwR7fIcdX","tlshash":"92d312bcc1b12bec8c13155b4f4847d13fe828aab6cf474ee7e124a3a158d966805ef5","first_seen":"2024-07-07T22:55:37Z","last_seen":"2026-06-27T16:09:51.77556Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet8.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.044Z","timestamp":1782576555044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet8.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-ffed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wrz2OoOAzsIXkklJBxMZqb68JdD3jx299HK8Y3AGT6QmhOA69BZUjkiUSx8rT%2FY9bCde37GDxILsjDKeF27kBUXoMExozk96x%2FQgVHrkAHf6a5g3H7wVjhyxbPQ0CO8ZRHhpeBLMASY%3D\"}]}\r\ncontent-length: 65517\r\ncf-ray: a125b70d0840dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65517,"size_decoded":66223,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"7cb868a317c553c6e612904ce3443f63","sha1":"12218ba3863a5731b060812a8f1ba630672656e4","sha256":"54812aa308e529ae3604fbc3e6b79d5bd3f4e8c2d9b0c6e38b613b324c9f38cd","sha512":"09bca374dc54dbbbd4101ad7c1930092d179febb890ac3545678b1f4499cf73c0e0e67e88c92a1848ee0d055d68ee68c983413168014a4b45b74a510d33c6076","ssdeep":"384:+iKA/DYTEzSCj9Z2Pbm7Uzumy5jIV+/o6yp1sfUd8pkaJcn:+20gSdm7UEjVypvdhn","tlshash":"225343de6f34112cf4511fb8666fa2b0d59caa4d2f70eadf9b91af8111bf4502b23205","first_seen":"2025-03-14T05:32:35.534851Z","last_seen":"2026-06-27T16:09:51.826862Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/new/fc.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.076Z","timestamp":1782576556076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/new/fc.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-6801\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8l5Lkjh%2B48ZWC%2BN%2B5rWlvcpvrPIqGbgLoYLIvdFyYXOmGS9CtVuRp1baAWKZlpcMd6vZIKRdi7JBfjtj4YbhRdkNXR0hUu8eWOVInOdESUsek49wU%2Be73C8YQ2z45i7HrRDHLw%2BSaI%3D\"}]}\r\ncontent-length: 26625\r\ncf-ray: a125b7137932dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26625,"size_decoded":27334,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"70d3ed5e22f2a191364b4576ba511d2b","sha1":"35da56dba9ea59f696df53584ce96d7a0543b5b2","sha256":"13658e9836f04365e89a9e1265ffe66e32fc32e4ffadbfe2bc5a98901a271f35","sha512":"e462068ab5f4a9f0de08255a1aa8a3ace2e9ef3a9597d525d8d3f03ac3096c7be728fe87a277c712ae027c0f7f83f75f34e840aacb409b40cad9e49b3823701f","ssdeep":"384:zGp/rwo7k1QYwT1YNxgV0ZLMLLBzdiiRKgxwwvdMW0WSfr+dncd57V:w/MRwTc9Yv2CMLTr+dna57V","tlshash":"b8c2f13d67138fe7f4580b3485655fd0a80512267208d23bb7e6e6253cf37b2ae68232","first_seen":"2025-10-05T13:22:44.128405Z","last_seen":"2026-06-27T16:09:51.744977Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/fonts/wgcent.fc690ec.otf","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.392Z","timestamp":1782576556392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/fonts/wgcent.fc690ec.otf HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/home/css/app.0640bbd82e3d81830979219f9af19580.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-5950\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6G5V%2FEUALKB0gltnnoS1e5FtWXV0GzDjxvyR8BVs1gYlJVlBMqKKJ1Sqcl9siElNDVXYW7O9553zkcVJt7Yh5QntVyWi47t0Du4%2FnI9pTPEDWXHdmdZgbDApgCUKt6qfO%2FMUgg3tSs%3D\"}]}\r\ncontent-length: 22864\r\ncf-ray: a125b715796bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22864,"size_decoded":23586,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"OS/2\", 8 names, Microsoft, language 0x409, Typeface � (your company). 2024. All Rights ReservedwgcentRegularwgcent:Version 1.00wgcentVersio","md5":"fc690ec87c8aa25bd130d20e694d4a1d","sha1":"5ab51f36b05f33a540b0d33081a6cf1353f95e6f","sha256":"0d5d4de6e5e12c7cd57277f21bbe3ef6bb6673e8ad793db00ba6450407f36714","sha512":"2ee24e49c8b7fea0a6b3fea896d0ba4404b2cf0645f90d2a0dd125c5035cd7583cb24b48a42212b1a643e1410df4824759a976d4bab2ebe8d12241c056383d90","ssdeep":"384:2v4matIuskLdy3fzxAKjarOMkBVyLS3q+z86ixzxCecigcqYpSBcrUkgMfLg:4T9GMdjmrbkBxg6qzxCeLjPrsMfLg","tlshash":"a9a2a009cb21eb05ed57a8b00ee1165ee7b3d2b9fd1b474ed09d62d858021e01bafdc6","first_seen":"2025-03-14T05:32:35.543043Z","last_seen":"2026-06-27T16:09:51.828069Z","times_seen":58,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pg/1543462_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.568Z","timestamp":1782576556568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pg/1543462_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-8718\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZP1gV3XojBliprbC0lmKIq85td086gdMblCisxWfPu2K2YNnAM7ClJ%2FYpMzbmJDDi5Nu7tuXu5G9bQ3G7p4kksk5kaxOKErEbf8A8RVpfiC2ler8tecTxcOcUGslSKLTHpDkzYgej4%3D\"}]}\r\ncontent-length: 34584\r\ncf-ray: a125b71689acdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34584,"size_decoded":35285,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"77400f8d8c7e9037301bdd12c81842d8","sha1":"e677fde5ebbf5b50e02619fcd5350eb6c6d92a23","sha256":"bb03573291cfb99280c530085779b25da6d3cb157edc559734d5dbcd2c498df5","sha512":"6987238d5e8929af91b58e83571f17e2d61510fbc1a007b9fab1b9add1b137b59ab83250157122aa9f07415a7d0a5d982862954e5489c53d2e625ef68529d238","ssdeep":"768:A5POBMV/MyHx1j5aP7zoqUgZoJ2uE0gPLuDR3NLc5WmPy6xD:TBA/qzD9uE0OuDR3NA5Ll","tlshash":"80f202eed8e254dbe8764bf6756225905c40a106b5c96f78b58a30438f44d2bffb20ec","first_seen":"2025-09-26T05:22:37.264216Z","last_seen":"2026-06-27T16:09:51.828618Z","times_seen":59,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/any_win.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.010Z","timestamp":1782576555010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/any_win.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-956d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WMnOz1WEUbkLzl9lFX%2BiGybJGPyTxNI4fSFfvHB6j0ywGB%2BPfGvGY7Y2fNN808wXRF8TY9RxJrirXHbguxeRmbCYB53WePQRoqI73CdHwYmyZC8%2BvEOtPECfEYbvjYH4nj%2F%2BpAxsrI%3D\"}]}\r\ncontent-length: 38253\r\ncf-ray: a125b70cd833dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38253,"size_decoded":38965,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"e07851b0639323a370fc27f7137511a1","sha1":"bb2bb1a1e5b457bef375d042e504840b49d69090","sha256":"8af8e92276eed571f8ee5023a6bc702d629a3e6caf1a1c0abe2c948db8d66101","sha512":"8d318742a1e4bad625da303b00df4a046d11cec374a34fdfaef8d6c1daad6d1f49083954af66f636f961cd7200c630868c400235f54cf63697991f3909e3a1ba","ssdeep":"768:AFmzwWhTthV0T/naHUXFn9CYeEYvSNEEXVCjmZWIJ/LB/jHLeLq3:mmThTFMaHKgvSNENj87JTB/XB","tlshash":"4603e11ad838625ec663e17e3407c6edec225fd8a961c5e6c41e3f2561f78ee3522028","first_seen":"2025-03-14T05:32:35.562167Z","last_seen":"2026-06-27T16:09:51.793761Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameList/video/tada.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.081Z","timestamp":1782576556081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameList/video/tada.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=4,i\r\netag: \"6892c529-40c7\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqNiGiE8dToeqn%2Bf410xXzc6ApiiZ83IDDO48K54dqT0kE%2BYpeHI5bxE9RInVteHDGv5XdcYRK4%2BN5MbraBCKtr8dhq0hZq9uemJ7MAlsIlqX4acKxkNbK7b1oarfrvc2G%2FUKj3rIHs%3D\"}]}\r\ncontent-length: 16583\r\ncf-ray: a125b7138936dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16583,"size_decoded":17290,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6249fbc3300e2e55a1f816352d58cf14","sha1":"9cd160534ef61bd0c6d6f916cc96353de0abaa43","sha256":"f1fc75ae71a138240e905b6fd02bd38bdb6eed833a0fc2e12bf2fa9338da3747","sha512":"7239045cfef8a2e86351284ef414c25e2ae30e96a1a4e6efe58e81b245fa25f99450b6861ad56f59cde4baa4a6686bd64e94205b0152aabedc819b713e95e75a","ssdeep":"384:5kz8IOxDcYKhKwbmqXUGxXq3WmwueqlN7iZmbvW:+zx1pKUmqXtxaG2e2NhLW","tlshash":"c372df9ff286e181fad0837c540916263138b8da3faf52547eeb6111c92cf2ad855f8d","first_seen":"2025-10-11T10:32:16.880574Z","last_seen":"2026-06-27T16:09:51.812087Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/game/","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-27T16:09:13.459Z","timestamp":1782576553459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/game/ HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mango-cleopatrapg.com/\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bmg5I8esv1T0h9l8loBWti7dBeahON9rqsJa3USc%2BENbP8mfDyw%2FPvDiBRRySRyqopixZug68Nv%2Fesvq5KFnA6Taq1EoynrJCTeuDpBSIu32U%2BWmcC%2FxOVZeleK%2BKb9o8hMHyQlGFXs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a125b7031edddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5547,"size_decoded":2748,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f70140071b9048a175137f8366bf9c4e","sha1":"501cb32dab024c3433541d30e023c9d1ccb80dc1","sha256":"48309409384eac4ef5aed93382a3e4053810946bf4ecd69457d078d776c5c3fa","sha512":"7b26e5ff7638232f53aab3c1f6d61cf848169b6aa340ee21dc72ab27c57b9491d002867382011760cbfb03c92320754e11c86dc7393294abd273806b58457d9a","ssdeep":"48:t/upSCEjd+hZw1NbgqyuEzlBtA3YS+SWK3ieSTMrunU8wwptB38dy1pVo06vclkP:JuAJBNczuyth7z60lrN4Na4","tlshash":"98b1109b155225191033e339dba3f148fd3750ab2202814a79dc17952ff4a8b81e7fde","first_seen":"2026-06-27T16:09:51.734377Z","last_seen":"2026-06-27T16:09:51.839143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/g.995d8e2.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.020Z","timestamp":1782576556020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/g.995d8e2.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-312e\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0DqGJ5M4e4p%2BeMSYPZmdMHiOaTixTgUO9F92gtJ08Fa8woBbKKv%2Fi7XkR2zWHOLszcL2vu6VSNanPKhAZKeQio1TvSoswLB3Di0AM3%2BaYxrhVvnX%2BYGpU8Nbhva%2FkjaeppW9Ev5ey8%3D\"}]}\r\ncontent-length: 12590\r\ncf-ray: a125b713291edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12590,"size_decoded":13340,"mime_type":"image/png","magic":"PNG image data, 126 x 126, 8-bit/color RGBA, non-interlaced","md5":"995d8e2d61d81e33d145f8ba7f381766","sha1":"0c1f551cca27dcb9b4637aa69c8bc62810f2da6d","sha256":"4b24910691d83f52bdf1926b0d7a0f6bdf8363dc672675c1469fc5e569beb179","sha512":"026324ac8b389c66cabb4e74869458f5de481515b4361e1402b0566f34f8f4e6d0b7f7dbbc323c5eff77d3beb2163bbd3f48c4c12a83efb4ee2aa84d131d9390","ssdeep":"384:y/1I09Wr83tH+sJ8WQXDZCsbPfpnYgzq0gf8:K1I7r83tHPKWkZCsDpYgzq0gf8","tlshash":"4d42d0b91be1d0b4626a9476b43e45dd0f1e0806ac9265cd2b4339f6b0c1c73b74467f","first_seen":"2025-11-14T01:35:03.563026Z","last_seen":"2026-06-27T16:09:51.816552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/5.7036760.png","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:16.033Z","timestamp":1782576556033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/5.7036760.png HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:16 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-3515\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lf6VuBKVAb%2BUkupznZQ%2BO7l%2F2g5DcyAl%2FrlVTIxWixuAvRITMe5GXIDpqtmKpu9YQw9gSeYu7mP1qd9qOjMJ%2FA4WUV423iJ%2Fceb3ZpAbbFsP%2FQJsmXmhEFit9RsTTEqp1EWkKTtuzek%3D\"}]}\r\ncontent-length: 13589\r\ncf-ray: a125b7133925dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13589,"size_decoded":14343,"mime_type":"image/png","magic":"PNG image data, 300 x 108, 8-bit/color RGBA, non-interlaced","md5":"7036760f240918f5885ea7d0204a21b6","sha1":"e2ff834edaf5b15361dd9787fe2bb5143cf0cdd1","sha256":"6b9f6db47682655f99e1ed888bf8ed1afafb48a7eff86bf0dcda99d25a4a80f5","sha512":"061967b9e00cbf76f89bd7a1bf1e2ed000eb938f847c8ffd02a44c4418e09ec47ea4ecfec38fe31e78a5da384a22d911b87fbb50fced7937dd96ce8c6b34699b","ssdeep":"192:bf7PDyeeWuxvJJDDzfCE4SpZhDknVPjavMBnzSCIZNtPm3oqorlqkknPAd:bTDynTxDDzfCERpfGxxzSCMv7JqbPAd","tlshash":"5352d0d69923e36bfc017ec321ead6e42568a0c284d0e4faa64e64c7579e74d0c01e5f","first_seen":"2024-08-19T22:48:56.389055Z","last_seen":"2026-06-27T16:09:51.742003Z","times_seen":54,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/bet7.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.042Z","timestamp":1782576555042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/bet7.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-6fed\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdKTDHnprcON6l0pII2iG7J%2BxwUWMSzueljsNCQBYPrGJ%2BoVUpoy2AjwPoifF%2BDAKUWIlI2WE35u3ezEC%2FvZfouFJJhb5KYlTFIgVvXoEN9In1h%2BiVVgIN8UiaPHHGd9zqUwqH%2F4S1U%3D\"}]}\r\ncontent-length: 28653\r\ncf-ray: a125b70d083fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28653,"size_decoded":29367,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"d9532cd9672fe5b76599318245c0759b","sha1":"941c3962ae950044c18b01a42550abd86ae61e3b","sha256":"1afdf90e7d746169c38c1d2c5923318355f2bc71f3f0a12a91fb85747c99c996","sha512":"e2785cd6bf8a229f2d60ad50b83d37fecbfe22ff1d8e5138e2845534f30f9435bfc1c5bda74f7617b212aae0cd0c9e677c4a88f9c4884d31dfadeb25ca67fe61","ssdeep":"384:Zi1qugAH+qi1q9wpSY5OVP/7xtBnM2HFi2TsIlFdt3fNnjNZKoep1Msq5RK5ynL:Zi1qhk+qVCMF73xLHgLc/tF/K10XxL","tlshash":"eed2b065ef764529c09127355dcf329852881da8ac60e6cbd684bf25d2fdca8bd2e101","first_seen":"2025-03-14T05:32:35.55727Z","last_seen":"2026-06-27T16:09:51.802889Z","times_seen":121,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/mines_bomb.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.989Z","timestamp":1782576554989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/mines_bomb.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-7de3\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3QFSfbWpiZFQx%2B31lu%2BeEI4oi4QMzEE5%2FkXSIH74NFbA12RLO6GoWstUCkY%2FUhZ9ombUdQmnCEFIQlB%2FuHA81WaptfnUT9iBfSycICHvQ%2BYVq15l40I8C9d3hE9HmSgUoqCBsukNtc%3D\"}]}\r\ncontent-length: 32227\r\ncf-ray: a125b70ca829dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32227,"size_decoded":32941,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"e16ed65476f7f8cdbaab02422fc0d847","sha1":"f6cebd2948c3bc51d4033f166f284c84d6733406","sha256":"fd776f4ac62069b6d300133f8f1f8f2f95763c9b6aa766a68c0eba43b4c13b51","sha512":"98815c8d221c01bba174df9f3de584a4f78d254e0965cda02f444877923b21f1b6594efa3efcfa28106d55f0dce794f053a9fe329f800070c1cc6d187513606e","ssdeep":"768:QLOOYeunNmjqXEluHRnYJuobR7CBQeXl1qkPOee:tOFunNmGU8CJuo9CDukte","tlshash":"bae2e1946a95078fb45833066a731f59f13a1daf8b9b5f3ef2a09b941dd3d836350008","first_seen":"2025-03-14T05:32:35.532624Z","last_seen":"2026-06-27T16:09:51.746782Z","times_seen":129,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/mp3/fruits/compare_fail.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.020Z","timestamp":1782576555020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/mp3/fruits/compare_fail.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-5f6d\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rM%2FtcVUjdzQmqfoBZRGaQkPKsHRaigOKMwVEZTqKq9aHS3977OVd1uVmqWev6MtF0NX4kF9GJUeL1DyvliMziBpUSC%2FjP1kQ8qdsPho2aE1LybpS64uK883PdRoP4rtCxZm4S6zVR%2BM%3D\"}]}\r\ncontent-length: 24429\r\ncf-ray: a125b70ce838dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24429,"size_decoded":25137,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 48 kHz, Stereo","md5":"579e137b56c56b3dcc05befc66d7bc54","sha1":"18a96ee57bcc9a677a7c1bfc9cf5add417ee71e6","sha256":"822bbbb7d4af610017be6cb5d470a2d707d9eda5527dd8f5ca55cab8914efcb5","sha512":"bd022dd19ed204feabca781e5b096d7b88eedd2e5c0a299d495886cf304bc69b24097e888e30c7d0934cfdc62213b9d009da9aa26c4eac8cdc4b96cdd027f96a","ssdeep":"384:4SdzYul2poF8PG1U7e0AddpDbIbq+SWDMglxr1lmz1P:3h2KKG1oXWbuuSfm5P","tlshash":"d7b2af9b6f305298f6cc413d5287f6f9e4629a493967fdc982883f5260fb0427739264","first_seen":"2025-03-14T05:32:35.555712Z","last_seen":"2026-06-27T16:09:51.757946Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/loding.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.357Z","timestamp":1782576554357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/loding.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:14 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-1484e\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UUQ7MO8%2B0j6vatDLT9l0707SrvjzFaH1B59ombW3Wsi88TFmFYOK06FlhqWZIzAz3gteRl7QNJWY%2BU1l46tAvwlCd79IhBou6AG1E6fUwy%2Bbm7D2c2iHkUdBGsI96Xv3PXYpTFzuI0%3D\"}]}\r\ncontent-length: 84046\r\ncf-ray: a125b708bf67dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84046,"size_decoded":84752,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"588d406542ce70901161b211bce01b2d","sha1":"36d1faae571045e8512d48a7d1ebb803d50dbe8f","sha256":"0d76c6cbaa4c4661c4f18c8d310983594e148312d0c46d2cd1b9505ebd1fc945","sha512":"9ec1d587d2d2a763196301e6dae053fa7dfd522020a20c984a14bc6a247a9bec5fb5ea4d8e4a3979b2f5c540c7ba0db55701b3c7d0e311735628e85ae5743372","ssdeep":"1536:PSkwYzS2AeNtlzaViRvlIAm2QpP6w4TfG0y+7mzwJGyg7ukW:qkwYzVPVDRNW2Hq01iYGygu","tlshash":"3d831292d208cc95f4a40e79d9eefc976c53604b1fb1bda2dcdce4452d7980a28fb528","first_seen":"2025-09-26T05:22:37.341388Z","last_seen":"2026-06-27T16:09:51.741282Z","times_seen":35,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/mp3/mines_tile.mp3","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:14.999Z","timestamp":1782576554999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/mp3/mines_tile.mp3 HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: audio/mpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=3,i=?0\r\netag: \"6892c529-6708\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dVz0wt%2Ba%2FAcnWbaewDaaPsRpbP7vKGLojMj2mtH9qtSDUpCMWeLHzt97akIj%2FmULGHBBkE3C4GbKD4i%2BGLSqCPjMebLg3V6UWhxG0XGEU4qE8RO%2FHb8hpAiJqcEpVDnx4l96TwA%2Bro%3D\"}]}\r\ncontent-length: 26376\r\ncf-ray: a125b70cb82edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26376,"size_decoded":27090,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"7644261ea012d6852acbf8fde2be4327","sha1":"9290361c3e9f5f1d317716e5322fd92c7b809194","sha256":"0831204b411ad0e954d0e8e6ec5d6486b75d87b26dde5a3e808fa4d1b297aeb6","sha512":"e263cb9ef6b0e59d2041463a55b1b540e10027dba889a1d06c46e1d06bfa16c433c3da0d09ba74ed33fe054f08ac2ce953d4d3866be33062443a3c3c44bdd2b5","ssdeep":"384:/DnWf5wurfZSSb+XDTL9oka5rHMZAmWOFCo7JRCXWobdgRiQV:/ShYSkD8M6OFCoOXW/RiA","tlshash":"e2c2d1f60b15405af2b43a7f620b15bde88c4d5d9b94e7c9b84e8bcb213fc44ab45c92","first_seen":"2025-03-14T05:32:35.56129Z","last_seen":"2026-06-27T16:09:51.825937Z","times_seen":132,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/1.f0a4720.gif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:15.994Z","timestamp":1782576555994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/1.f0a4720.gif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:15 GMT\r\ncontent-type: image/gif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-d5aec\"\r\nexpires: Mon, 27 Jul 2026 16:09:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 3\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBmjJNieNT4SafPtM2tyPTJxvAe5V6OKcvMJ0vLxgIjOF8Cc%2FF4quySjG2F1XweIEW%2BjCWNCzdXRYVbcyJ8RehX5sKEIsFcfD7VbHUrADbYtpS51WPHAmVjkRlUjh9x7S5UTxzcyWcc%3D\"}]}\r\ncontent-length: 875244\r\ncf-ray: a125b712f905dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":875244,"size_decoded":875990,"mime_type":"image/gif","magic":"GIF image data, version 89a, 220 x 220","md5":"f0a472093347f0e0c570678246ebb500","sha1":"87a6dceae024c8674c098c194224e754de6a5d51","sha256":"3d26bd211f92d666f04a0c94c19ff86478cdd996a0c1e7488823943bf64048c1","sha512":"7120be45589e3890e78f98433d61f5256bc866295c8fd42e7cdbb403e830974c85f9c5e4e88c09eea7e8b593e331312ca12a31fcd63b41ca46614ad3676bcd49","ssdeep":"12288:4/iaSlG1PysGpSXWmv662ZFIy+hUeAvUnSVRDIwqFQzpU3ukt2a/r1Imv6gsbK:yZFyoGa1EFIv6LtIwHts/+Xi","tlshash":"8815121d7b1db9eb112b9e34e926009163134cde25ae29c9c25f2b076cb630827d7f6d","first_seen":"2023-11-10T02:58:41Z","last_seen":"2026-06-27T16:09:51.80972Z","times_seen":143,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pp/1519119693_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:17.085Z","timestamp":1782576557085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pp/1519119693_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:17 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-7370\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LnR2zsVE4MiskTB%2BS5EreSwJr5WA%2FqDirQkTO%2BsxreKkehv64ngAi46SDm0Bbv2HFI6AxIcVuDP8ATBXUuEfPwkemsyjOzPHyakbvQ4UBdHAhjc1kPcgZYTdeF4NO2mozKudwEpNxE%3D\"}]}\r\ncontent-length: 29552\r\ncf-ray: a125b719ca2adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29552,"size_decoded":30257,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"08e9f46fb21636ceedaab00e6972804e","sha1":"429d771aab35177a26fd72b0658cb7bbacf26fbb","sha256":"829e8ac6b979e09f46fdd45002b6059dc269cba03c6b0bd84b7c4cc6e3667bb6","sha512":"2ce059588453767f092819300787732ae97c9238d68d9f1741845bac36d2928fa1d3116e9a4286960e8864cd73ecbcf7c7dc28e2f4ce21925ff7c325f4726ffa","ssdeep":"768:N//Z8RVe0kFaBJLVafKkJCWfd4xd+ZpX99eE:NXqL+FoLIU6pX99eE","tlshash":"87d2d0a5bc5e864ae857fbaa34399a8c151870cccea921035d1f1be5ede89279c10c4e","first_seen":"2025-10-11T10:32:16.882525Z","last_seen":"2026-06-27T16:09:51.745597Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mango-cleopatrapg.com/home/img/gameImg/pp/1644578872_pic.avif","fqdn":"mango-cleopatrapg.com","domain":"mango-cleopatrapg.com","tld":"com"},"ip":{"addr":"172.67.182.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mango-cleopatrapg.com/?isredirect=1","date":"2026-06-27T16:09:17.089Z","timestamp":1782576557089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mango-cleopatrapg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 May 2026 21:58:52 GMT","end":"Tue, 25 Aug 2026 22:56:32 GMT"},"fingerprint":{"sha1":"21:FF:16:46:69:68:8B:03:20:D2:CD:BC:95:9E:EB:34:E3:27:96:40","sha256":"77:C3:40:91:B6:36:8E:AC:31:62:1D:96:04:97:8C:1F:AA:77:91:2B:9D:93:59:7D:92:59:93:20:34:C3:5D:99"}}},"request":{"raw":"GET /home/img/gameImg/pp/1644578872_pic.avif HTTP/1.1\r\nHost: mango-cleopatrapg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mango-cleopatrapg.com/?isredirect=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 27 Jun 2026 16:09:17 GMT\r\ncontent-type: image/avif\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 02:59:53 GMT\r\npriority: u=5,i\r\netag: \"6892c529-b776\"\r\naccept-ranges: bytes\r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFSLw2DSY6g4p4zU9%2FE60XnawkWauR3YFb5m%2BEjZ%2BDmty%2FwLKiRQtXbE8zucXZ2QR7CKPBYVl3IHhPyTHzKf87YEmxpRLOs1N3Yj7%2BwH08fIyFStFRQizG%2B9cnHzcTqaV2ZD9xqim9M%3D\"}]}\r\ncontent-length: 46966\r\ncf-ray: a125b719da2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46966,"size_decoded":47677,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4a3f29c25f5907eb2b25c7b00d2e519f","sha1":"17be446ba955247bf7f9d5d78c1b79982ec0252a","sha256":"5b7dfa4315b3d156f0630cf9f3408d53c888f27a7daee1f81cc442cd2863bdd9","sha512":"d46bec148fab956f26de786f377105b0890919e3ce34f0bea5acaa6384640e2c584681976dac79be4d0cbe435398526f23a5e7927cbeb22ac4c4ed1301558b55","ssdeep":"768:KtvqOhW5TIGP7sHTYU7WMrZflwzKO0HveSF2K8Pv0694wf9CIrmGfEDO6:vHkgOYGfOSeSF6PvTlCYme6","tlshash":"eb23f12762b75dd3f68ab134a8232747402a07224d35a00fbc97db1daa49a3d09dfddd","first_seen":"2025-10-11T10:32:16.862738Z","last_seen":"2026-06-27T16:09:51.742889Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-27","alert":"Sinkholed","trigger":"mango-cleopatrapg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}