{"report_id":"f96cc872-8ef8-41d8-8b09-cb447d877a42","version":6,"status":"done","tags":[],"date":"2026-04-20T10:52:49Z","url":{"schema":"http","addr":"ppv.cx","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"104.21.79.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"title":"ppv.cx | free ppv and sports streams","dom":{"size":79226,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46605)","md5":"223701e96bf84c5b56cb30b226d71480","sha1":"17141b95bc795c4c301fa356e8543e2594eb90f7","sha256":"473812fa0ae17747d743eb182a3ce8df315c9530ce7fc18aa99810b61ae00087","sha512":"8947669fdeb1b773c92416dd0f7a31e521cfa689c304c9506f367604828f363c6170f9b8310ed0b0c74c9e3b2d56e4c6ecae622d94b645436ffdd2d235f5d7ba","ssdeep":"768:tbNIZCE3vuIDoZKMu/6SbWQhv+Chv+nhv+shv+Mhv+EAhv+BZZhv+8Fhv+ihv+9o:tIvuxZKSdpb4Lwfb2IkvytQq729Y","tlshash":"5773d620b40050b71a1fced272b4bb1e7a37fb09c50fb644a7bc42650fe6e79ad99560","dom_hash":"domhash2079c0fc64a2dbcbd01c7f1d00c5a858","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ppv.cx","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"104.21.79.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T10:52:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ppv.cx","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":219,"request_count":73,"received_data":2978899,"sent_data":31156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"api.ppv.cx","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-22","domain_rank":0,"first_seen":"2026-04-20T10:52:52.009516Z","last_seen":"2026-04-20T10:52:52.009516Z","alert_count":27,"request_count":9,"received_data":155787,"sent_data":4326,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-04-16T05:21:23.297686Z","alert_count":0,"request_count":3,"received_data":5010,"sent_data":1360,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mumbai.poocloud.in","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-27","domain_rank":0,"first_seen":"2025-12-22T03:11:08.678063Z","last_seen":"2026-03-05T02:29:32.15034Z","alert_count":0,"request_count":1,"received_data":798,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":2,"received_data":2942,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ppv.cx/_app/CZUAfUxG.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"892573e55ba29d7c03dadf5000844e87","sha1":"c7cc6454734a71533ba131807738321a947b1f7e","sha256":"83876967eb957d1675956df7918ef8d25eb771d60df263a4e02a3d69c8b96b21","sha512":"5ea44d377b4137feb65be701cae67472937ab91e13ddc94d2f5738c24d3319aedbaa522c0234212f79a1e0df1fe54cd62a464738f0905c0298f751c4ea5992d2","ssdeep":"192:QZugay/NV/BtpM+SA/nTwazqzfd2Pz/Bcgs13z7/kZd/doPme12nn9gdcw8UYUMr:QYFOVT1LvMH8UYUMIgXQ/h0Qxs","tlshash":"3e42a54868059eb4dea71571a4d87c10b11c1fd8c232e4c5f2fe45b867c69bebb8b368","size":12419,"data":"","first_seen":"2026-04-20T10:52:57.780331Z","last_seen":"2026-04-20T10:52:57.780331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CaPMEfcl.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bc7cea95879fe3d6e8ee6308e3f1b276","sha1":"075b61285fcc765f5f20bd56169bee5b8e1ce7a3","sha256":"4713b6e4c83fd9cb6e3f14eb601202384a82e357ea6627d6c6f629ad68ac171c","sha512":"43fab96168ceff1bf41ee46008cbba9acbb07587d27d3dac7841aaae1c89e6a5bce11293d212760a78d6c438842d2bc702b0c31e9d8513dcb32324d25a74c479","ssdeep":"3072:3/z10YAJvzpIdDu4xnw3H1Y6Vwl0PPh4ez0:3SYAJvVIdDu4xnw31Y6Vwl6PhG","tlshash":"cc44199a7728681342c6719060bf030f333670695408456cb75afdee2ebcd9ab1a7f79","size":278537,"data":"","first_seen":"2026-04-20T10:52:57.799077Z","last_seen":"2026-04-20T10:52:57.799077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CZ1U-BY7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e53e554c766e9b9240984d8cc35b496","sha1":"4a4bcc3aa8e79c21f6142730bf7ab302f9fe483e","sha256":"64bcfe3c6fd1458ba9244cf57e71f7984739cab50cb672f7e9f57c9c0b688172","sha512":"978a7d31ce90d21233c361d5bc6c52dcadb96145c8292fd221c2e09c3e6ab97903ecfea57a0b9ea440c663b4f409ed955d80f2ef1b7939b8d3849fa30ec30e6e","ssdeep":"768:n5k0cHher3RivTPYgY4kXKEcECj3+U9AfLrJM3lnmnjP6JvXpiuXRH0r7MTWumJA:5k0cHher3RivTPYgY4kXKEcEkQJGUnjM","tlshash":"60c2c848b20aec39293760a11858ad80f96c5e9fd731fdd7f3f9886817c847875a729c","size":26132,"data":"","first_seen":"2026-04-20T10:52:57.760875Z","last_seen":"2026-04-20T10:52:57.760875Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CxzOo3KN.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24400a20fbe3e4c8aee6df5d0c5e7555","sha1":"8680e47fe6749d5e426808bd8b7882ab998520b1","sha256":"5f1a7db84e88158c1726d1911e6bb5fec0dcd49a46e003f834996c788edc151b","sha512":"2ec65313ffb9424578cd50fa5a65fc1263f5d36544e45dcb8e01ee4f668791efa9652f388a392281a97dfcd4158c006e2d7a5cb842a277bc5f8975796b66abf3","ssdeep":"192:YCvc1ktNvTyPU1T541hrWOadDqiEBwu6NuYFwszwQ+4pNmovSSm:YCUUTysNS1hKOadOiawu6NuYKRuNmo6H","tlshash":"58e1854db57a6ebcf4ab891484686506a68c2f9fc1529585e3bdc92d33c0d382ed837c","size":7444,"data":"","first_seen":"2026-04-20T10:52:57.818373Z","last_seen":"2026-04-20T10:52:57.818373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CIyKFzqa.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ce6b322b3da2626194528aeac2399a70","sha1":"077b509bc2f8397b52872b29d8c4700f89b0dfc3","sha256":"d79802b8bbe6ea3debb61fd0da8c8b84d8ebdb534aec6c8abcf8bd316b7ae6ac","sha512":"18492d77405a950d70535717380ce047dba243b061ee108db8f3948a8bc9ae97bb79c36d9f9c620cccae54499b3d415cef466b6893bc5075a7012c261bc1fa17","ssdeep":"96:E2L3XiNBKkkRmGrFjPejEX9/16A9jaQ4WIIr3U+6H46wTwt:TL3XizKJR9rFzejEXRsCN4WIK3UpIwt","tlshash":"e9b19744f50dde7999a7008c20959d20f229df8ace30278af0ff82559bb5c19bf8275c","size":5243,"data":"","first_seen":"2026-04-20T10:52:57.836244Z","last_seen":"2026-04-20T10:52:57.836244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BsN4hVl7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b5bc2061b7a2f73f64be1172e271754","sha1":"215c8547051fb61fe7efd3bd511816a2742810a6","sha256":"24c60fea76ee03fd0ae8d724b45c6d97975a7cc3db3700d44f581416e555c71f","sha512":"774d5b5c369a53c57df5615c2fda81ef27b3bd5a6ef2efc4d8ece1830577882c863d3a40a3231dc5aaae4935fb4e609090bcfeaa7b0f742ec7840342885235a4","ssdeep":"","tlshash":"bcf0a34d7948dd7924165c89113adc24452fa85dd63cb1c0e1417d74b7c849c731b728","size":442,"data":"","first_seen":"2026-04-20T10:52:57.776266Z","last_seen":"2026-04-20T10:52:57.776266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BjO3HPfu.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"984524ffd61352a07edd12c5c443e536","sha1":"9c4fbe6cf265f4611e27dd4a69fd187523e37f2b","sha256":"437fdae99734d579d1792d91deb272b5afa6281da3b56a417939708c4e3edb3d","sha512":"72a14e0093202fb24267ce38f229c7d27f507d271f75843d7330874c75289075427f6b30dcb2415ae7b9854650e440583afafba8a2d93874610c03217cf0d78e","ssdeep":"96:Lke3F/wb0PXUYUtZdAw2Yn/RWpZ72MVgY8tp32ddm9jU2H4fMc1vxaJXC:LjIIPUYUtZdAw2k/NS6oejHYfMWpalC","tlshash":"1db1e89aa021db7ead6310445ea66702712c67efe3e19de600fccd361425d6be07bf10","size":5230,"data":"","first_seen":"2026-04-20T10:52:57.781686Z","last_seen":"2026-04-20T10:52:57.781686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CT3IsyzA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ede88729acd85750a1cb2f0c74c60b84","sha1":"005bf1abc3556974915b172271816706369a447b","sha256":"b3fe68357a6050cbb8749315b62a9cb121f1cf697bcb36cafa150a60a1e5c7d1","sha512":"f710b42642e26a35d896b84c27118e607dc0b5996e9f084556a0ac8c353e018c766de08d74f3fc2edb46ceb2959c3c2d2d992b959e0abd50ebc1d293f02cef92","ssdeep":"","tlshash":"dcb012c3a141615601c2248cc5126419977752b6624c1530944989a0732637c9217885","size":93,"data":"","first_seen":"2026-04-20T10:52:57.789155Z","last_seen":"2026-04-20T10:52:57.789155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4dc48e011125300818b449490b50d86","sha1":"3ed944d4ce920a7fc28269ffc74cf43b0c4cf540","sha256":"bc7d909a7685cc0988e6aa98fc4c79c7aba3c0c4eb6dd82fd6f5757e2fb4fe1b","sha512":"c250404d41406af8fc9e6e45334a44247e118e32de93a27165c814ac12585258c23f8ed0cd6981e3b8803697eeeb4a89d84c8d1135f67641f2a6ffbe60a967b2","ssdeep":"","tlshash":"b6e02b9a5016123033fe25a6e60bb725f23241fe0684e551521d492a396822f8b1fddf","size":390,"data":"","first_seen":"2026-02-25T20:30:53.10847Z","last_seen":"2026-04-20T10:52:57.843706Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/AQtgKtpx.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"60ba502a9cef8b4b1bafdcb7f0cd2e65","sha1":"ffb29c4d467235cd03f2df69377977e9770dcd30","sha256":"b974cc7be3bf485f8f2b99a82547194b6f438ce8b86c8591656f5f2868cd0810","sha512":"a77668de49303f6d56f5ec99ca614440a772db15f77a5587f02d5a5fd49d30a17e282f55ee55e3a38e7f78ae4ea22d6eda1e9d5d85cfbe422a15c6a2364ff59d","ssdeep":"","tlshash":"c77196c89d4c9db2d95b18d84874e830b27a8744c531a081e1feaa7c9345dc9bf0b3ac","size":3751,"data":"","first_seen":"2026-04-20T10:52:57.797771Z","last_seen":"2026-04-20T10:52:57.797771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CnfCPFi6.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"03a6325758ae4c14555f03138c9f0762","sha1":"5051c5d1917aa2edcb6dd4349b2754852a6107ef","sha256":"bff54a836bbfb9444f87ea80da2d69716ddfca80b093ce2cbaace408426a1ed3","sha512":"ed0efda36ee3f782124984cbfe6d7323c6c91a01a2a2e68637c2af2f5bac0a0ef68ef5d11cdb3bba69aa24afc45e14cd5ed31d4b63f48c4b227faa0e333a5045","ssdeep":"","tlshash":"f311abcc688c6578bd072d47d235a534b03a95899a32bdb1f1a1aabe6580a20b20f364","size":878,"data":"","first_seen":"2026-04-20T10:52:57.816506Z","last_seen":"2026-04-20T10:52:57.816506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNGIj9uB.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec95cf03fcfe285374a07df2fba47ac8","sha1":"5a1560a44ce32ea19e154318d7961a76dc432d30","sha256":"dab4ccb615599122b2119af3136b244351fc3e20d239822df10b4d43a8565cdd","sha512":"ba2d3f94d30f83e3e36df55ca14d79fec2e41aee4426fbde0467c80f490e6b0f6d1e9326c560754764e45d44918c495d1c47775d398eb9ac2f7aaed0b29e1694","ssdeep":"768:9qt4ygiMxSIxxnB+U9AfLYnye/EgMc+TAJdRhLF8ESigv:9M7y5LBETpv","tlshash":"0ad20804b106ed3a697361956800ad80ba284bdfd271fee3e2f9c97d27d4c7435772a8","size":30427,"data":"","first_seen":"2026-04-20T10:52:57.794336Z","last_seen":"2026-04-20T10:52:57.794336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56e296260a290b8f2a17f23ee99b8418","sha1":"03677d6209b7e4ddf8916b54d7bd20eaaeaa353d","sha256":"df3c1253595bc43a30dd7381e1639bbf6fafbcd538766e26ff5352d9c0d40158","sha512":"0ab2257082b08fd688655ad818600d5ad3dd788be5fa843da6683a74d3388a1501305a1c41c96035ed89d623f753b995ce935f300ac6ec2358e8fa4de49b2ef0","ssdeep":"","tlshash":"6a211e287049aa2f16d30cec60d6206871372490b01aaa00f57df572be258ef8a72ddf","size":1126,"data":"","first_seen":"2025-06-22T22:10:01.952385Z","last_seen":"2026-06-13T06:17:09.595531Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/lOG5DMGY.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ccc0b28751d6513f305248ffeb5791e4","sha1":"6093d38e265f512a72ffdeea7dc33a58b2293be6","sha256":"4897e21d071cab4a60b7e9b05d9b92063b8a7e414401005d6e6fc6cd07dca3d0","sha512":"3577d4470c642c0b09f7e5350c6809bacb5fa86ecca23a4b148347c3884c908acf4a6242e59814a2c34b593dd781413fd404f1ed5ecc0c6f2ac718b5038b320a","ssdeep":"384:EWH+ZTbXUH3j//bEPhXgA51/CBhdAAf9IK5qM:EmUXUH3j//YpXgAP6djf9f","tlshash":"e172a69bb33a4e8b743e7bd7cd968f4dc9ca555321c0f178dbeeb68169a00568270c90","size":16640,"data":"","first_seen":"2026-04-20T10:52:57.795824Z","last_seen":"2026-04-20T10:52:57.795824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac72346a5941538ab67b03bfe665e61","sha1":"9e1146858d6893012bfafb44cbe9bd807aeb2c4f","sha256":"b5809c51b15f8d9f50112b935844865ab160d929a211dc83d8c6147d159480ad","sha512":"b854093d4cff0cc6ac4f246f14000aaa134ce3f637bd73f1c8658d81c4db44e95af36e5a7313043fc34355d33600af32e2bd50b6efb4a36d026459a0e9508ca1","ssdeep":"","tlshash":"4aa002b852949b39696711cae2b0c3de7d6030e9f80e259a560d1a1b2c41ce166a6aa3","size":74,"data":"","first_seen":"2024-03-16T20:43:30Z","last_seen":"2026-06-13T06:26:28.348694Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DdETxMij.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f7464b8b55e89adcd899b952ae44b3a1","sha1":"c7458c23d1806a8cb2d8c527827ec7e577647073","sha256":"d6b5e005f8288d8fc06395076eecae957ed16505be78fd109bc7e233c0f143d4","sha512":"40eb75d04e34fbb49ea2d2c86c70e633d36822a89d3307a4a59543eb0808fe88efbe2fbacbd415d02cd5e8783c3b05ac1405b8ea9fac7a50af9728d46eed4eac","ssdeep":"768:4cIhON1T0m9KZ5sAMGNr4F5eQzCiSMcMHpGmFN2ih6haA+5ddB+PdnhPyWmt5601:4wwTcvvF560u2MCIVtU5HO0jF","tlshash":"2b831880b148a8757f774486d1b2d810f23aab58e111bcd2f0ef5e6e16da9a432df31d","size":85514,"data":"","first_seen":"2026-04-20T10:52:57.806681Z","last_seen":"2026-04-20T10:52:57.806681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/nRU2woX_.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"053794b9bafed3f699f125a1757b7eeb","sha1":"01f4c99027c26979a78d2f4fba61df308d33cec8","sha256":"f404891e2c63a9dc4bcb1d5f4a5b5bc9d8a84012393c54820a1336d68c70ec27","sha512":"7017e4592ff01c1b3e3be90cda34385549ce6ab27982f1d244266b1344f87de13f7da426a5dbd49a7805a74b3d2ee44d55d0b5627993ea310babd6c050ada9eb","ssdeep":"192:6voXP14RYDy2+l4QoDSoi0VJ7K6o6pmNOTUlBlWLZG0k46Pl8a7pv4TwImR4Jed4:6v5Y1+l4BSEJe6poN4UlBl+1HaJ4TwlK","tlshash":"62120ae57bf1f231079e15f8927742013128196c304ec4f2f0ea6dba34aa5c5c86af1e","size":9686,"data":"","first_seen":"2026-04-20T10:52:57.785056Z","last_seen":"2026-04-20T10:52:57.785056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/D48aHa0e.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e85b70d1b90f37203c9d4acc7244bc10","sha1":"f45abdf6852fd0db0bf790a7fbb2f01265c50b6f","sha256":"b0da5428b09dfa6c9c10b743fae5c654e1e6c3ee453def3559f928c1faf60cda","sha512":"eb963cdb4ffcc6c2fad4e2d7c306189b70f3fa11058235b562959db04b02bd5ca48a87d87ca3962103882520800235592ad2733d2821a96fe9ad78bdb33d567f","ssdeep":"12288:O4hg4iqzL+ILLeb+rqnA8+DvvVXeweRjDN6P8YPIT:OAg45L+ILybf2XeweRjDN60YA","tlshash":"10d44cd07189b46a1bb709d5607a5401f22eae58b408d4d0f2bc9dbe3b9b850b677f3c","size":623550,"data":"","first_seen":"2026-04-20T10:52:57.770392Z","last_seen":"2026-04-20T10:52:57.770392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNhPRPY8.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"47322b7e4ca6cbceec495f7ad94e111f","sha1":"741923c9238935c653d5d6bd847f923f3660bcf9","sha256":"6b4b4971632a9083287819a269949b6dd2167509774b6365f6aa150f20bf0826","sha512":"07e80f9c17e5616dc12237a21de5b68f555bf6a2df8dec5b7f5f777ced9d09470c02f83873aac5bb69fdb02112f6630b7a9db4e6200d16def6ac04ec71e2875a","ssdeep":"192:cSSoYXMU9wP/dG5xKccUKqGbP31J2BwY/dfKPvVoxKiYYSdKvcqK1lHKRdnTKccL:ltWM99vHUe","tlshash":"3de1a78c6c09edb8ac072450ede86e00f43d5b5ac9205859f4fb8b2596c59d8ff8f358","size":7270,"data":"","first_seen":"2026-04-20T10:52:57.80423Z","last_seen":"2026-04-20T10:52:57.80423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/C2ez0BML.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"91c0e40dea17ff183003d9140389859b","sha1":"81d997df809ce9e0cc6f5aa0f3818cb1fa78b367","sha256":"4a6fae422ad4f6f3212debbf586c4da7de7f17525c18e1373d2d4911be61ed76","sha512":"921791efd6a41b36d4766466c003673c452d177932f688cd8d680c0a0522e1efa4f6f3441b5558481d112fe397949602b1e870bdf02089e2e8a16e97447d99ef","ssdeep":"192:dX70bGLfVw0d7cqjcLZdo8Vj3hz56rwy6E7yRz2r/p7DjnP1R1GP:VoaLf20d7TjcLTVlNiSE7yNIpDjntHo","tlshash":"cce16574b251637913f53cf0a1368e9ba2633a743cd4d1d36a0ec9773512846bae3a39","size":7291,"data":"","first_seen":"2026-04-20T10:52:57.790644Z","last_seen":"2026-04-20T10:52:57.790644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e7af5c2c8fdc40ed10d86c5631285d6","sha1":"35349209f909b11df9c969ffb6574c912f6e626a","sha256":"ca9b5604633a74cce33a0b658607826395eba3aafd79e9d746ca89ccc0341f4c","sha512":"0bbf99dae6e080c1b2bf9865a39c06a73fa1c4cc5f62315c677ed34acc05c010cee92c61bdcffb0ac49c0a9167c12656ed0cd6fa7084620dd1179a112296c5dc","ssdeep":"","tlshash":"6d0144f322247d3c66bd061df438b6492eb749be884e2432f5c2951e3e1325323a428e","size":734,"data":"","first_seen":"2026-04-20T10:52:57.84708Z","last_seen":"2026-04-20T10:52:57.84708Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bw3RRejE.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f7bb9677f3bec750eeb66facd141ce55","sha1":"dda24ba14497117482076b5818da07c77cfe2566","sha256":"5afeff085180943a03b9790f24a9d3ad8c1a08c63640a21b423951732ae76ce4","sha512":"c05c713183fcfa5824c53613a18684fd0e62115073b180fb9926b2af0cc3b67c4b12ed841644870c36b30ca90510f9b6747a71d57513b3854eb3a50bf74ef71b","ssdeep":"","tlshash":"6441454cf805c6f8f697c089c029ac20f98a2edbd5667656f1fe560ad0c586b2ec0318","size":2389,"data":"","first_seen":"2026-04-20T10:52:57.786472Z","last_seen":"2026-04-20T10:52:57.786472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BYmHHTet.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"50d56f0626ce079f318c9f092854b226","sha1":"d43cf59462977d0caacbb56542f00aa79ad0dbad","sha256":"3239eb29c223418c680e94e3239e8bbf4a4db15136458bf7b30a4df6fb4ab781","sha512":"c2064ac1d64704218632b107fd8641509bfb54601e2be56d2ebf68d34c04f40c3c0f3dde78789a207f529b70e179e6230fc0f08fc2eed91276dd2aa34533d8a5","ssdeep":"192:TumZgoDE33xLrjIFn2Slh6Sxm9ThRFW/a+U/N:PaoDW3xXctZlLxq7+U1","tlshash":"a5d1c7cc35d720a5bf7554e050e6f114b12aeb88701590d0f22dfd6928ab98cfa6db3e","size":6542,"data":"","first_seen":"2026-04-20T10:52:57.83982Z","last_seen":"2026-04-20T10:52:57.83982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DCbhEQXb.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dfb3390621f51562b5f2bd890728f2b2","sha1":"b8b445fa6e31b2dcfb538390257dbb000584aa1b","sha256":"4682fa4d39f5930723cef5937e73420d919e06ede1094a7a31f1e99b2f5ec344","sha512":"ad63bd755234999b3bd62555059387a339e62d27068661b0b924cbca6591d40d5b898af35aa82f89d9b85862e04d5a783c7bfed942fb31d117dbef26695176b4","ssdeep":"","tlshash":"be3186bab4e295383f1704df49e65115a73101bf1c6c9dc8b03a0d3199f59ab4759f43","size":1697,"data":"","first_seen":"2026-04-20T10:52:57.755433Z","last_seen":"2026-04-20T10:52:57.755433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/j8Z5QhrA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a5bcc8f0b71efc45bddd2985747ab8f","sha1":"947014194cb14d3320e9814338e9b4207ccf4d96","sha256":"c98310acfbba8ae915c36e645efdbbabcdfec1bbc55efda07d8b540378724543","sha512":"0063535714d50cf7a3cfc1e7d87c065c2c3a693b3bcae848b96674189b19154a0c62d6a492fe42dcaf660b79a898139bfd9e6537ec981c3d09c7ffa057723959","ssdeep":"384:lP1gZ28fANy72FpAekjcLSfcQa2Zr4FxCKTw+DQQ2zzwiHmcT+/T36C/LNd9P:lP1gZ28faqmKekjJE254Fx5TvQ9zzbHI","tlshash":"3ca2f72ab421d8bef673109879fa410571580fbfc04089d2f0fd8e1127a5e76e9af369","size":23164,"data":"","first_seen":"2026-04-20T10:52:57.766636Z","last_seen":"2026-04-20T10:52:57.766636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CTj3ke3Q.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d799f8c91f612d6eb487046c55810417","sha1":"a28d7b6d049d23eb4fccf65b2dd0955629ac8acb","sha256":"1830d6dc4601123f4c39d8311ef091d97df08158606c9d6614737ab34401f5a0","sha512":"4464e63a3db6642f88f0b61af5cc29dceb269b09d06255e969507651975c4b85708095016516748df3265c7ae5cfb1da2d1312e07f7dd5884e79156b31ee08b7","ssdeep":"","tlshash":"7211105da6cad0fa3703e19db4a22451968d84ed27f12693e0eb085c26613a4c54bf16","size":944,"data":"","first_seen":"2026-04-20T10:52:57.758393Z","last_seen":"2026-04-20T10:52:57.758393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bakv33iK.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"805434a7cddc6c7feeaf901e1da8bedc","sha1":"7d7367ba2340abc14cadbabb617cc35b8ff2e67c","sha256":"e2892d9c2d4b3d31a0a361fb7599241b56dee0daa2dfa120cce572deec980634","sha512":"60a58ea3e9c89fe52c858b40f357d474333efb0f9167d6065639ff538dec068e21d232357dcd7ac8ed1c4129fc2e8419b32b52bac752365b2facd7bdc48942df","ssdeep":"768:d7HWFbWQsmMHBxOcpifkU9YqqzcOefCwjtkzlmiNlzaTtTuAfGTpkXlKkX:dzjnUlqzcxCKSxNUuAfpX","tlshash":"0ef23bc0744caebe2d6304c690b7a420513e970dca6568c0f5fb5e785be6da0b65fb2c","size":35591,"data":"","first_seen":"2026-04-20T10:52:57.773504Z","last_seen":"2026-04-20T10:52:57.773504Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BXCTK3Av.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50d69fad59732b38fb4a226a617fbeaa","sha1":"a662bb31cec798f6fd3dc4eb7716cf3203752e19","sha256":"4c3245f44c8600f6d82658f0ccf72531e43d026c001884bf38879e1e0182219f","sha512":"040164ebcc6be44a55b0bef282361e8f1aaa2f25efa4f2b11e6eb92d9b279afc4256689f7698edccfafda30ba9af6b2fca353b27b3ed74f15a88b1a70acc7179","ssdeep":"","tlshash":"1f41535c6c38cbbc946748542136102072852aefeb6ba989c2f98e293da3db75d50311","size":2438,"data":"","first_seen":"2026-04-20T10:52:57.801284Z","last_seen":"2026-04-20T10:52:57.801284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DTAcx3Q0.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7bb96c6986f1c79d3f097469b1e85ddf","sha1":"b15d46e9a2a47fc24c6a2a2a442f9d78744b2104","sha256":"597447e3c84275a32e270934bc9deb6baf46c8f458f8a70d7c0101e0452e26d5","sha512":"f40e1c44a8c41a84bfe392d744650158507871af33e6b0bae43b9aeee22cab258cf230dca75a08c56f9f2bcc4c40c82e2ac195c627cab26a56b6c3da83c2e870","ssdeep":"192:hFjX7wFrspc9eogRb4k6UB6LhY9/rX5roUdRdcsjysq:hFT7c9eogRbB3BK","tlshash":"12d15148d514ee3a18937099c8e5b450f06daa54c735a7a8e0fdc61d5f20a41f97b39c","size":6454,"data":"","first_seen":"2026-04-20T10:52:57.772155Z","last_seen":"2026-04-20T10:52:57.772155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CHgA9FoW.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c460259474494ee470e8763050770a1","sha1":"d779bad1f5fea864e3b6b122617bfbb77270dc9e","sha256":"752ec7f66b6d8b266396d65dd0d917e138359b921e580c5fa9be6b8bc99aaa02","sha512":"f4eb1bb47204014b19418b86310d31e24de08eb996ef5ca2161061bba795e9f533d742ea3b1b2724aec24193bb51e779793861df2bdfef70d9babacfaf1ec871","ssdeep":"96:F7R0w1okNqTxwz8TeY71M57AjxAQwR2EpUYU9qZXcBt9:h/SkgVwz2eY7y3R2KUYUgZML9","tlshash":"5d810acc308a6979b7a744cc40946251a49cafebd4756e53b0fe8d5533418b0e8bfb34","size":4151,"data":"","first_seen":"2026-04-20T10:52:57.752216Z","last_seen":"2026-04-20T10:52:57.752216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BWyoOGMf.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"382021c8281e92aefb928b9c350445c6","sha1":"45a4fdb59b19e7a6d8423007ad8887bb0d4f5d3c","sha256":"74be4870497d1c756728fb2aa6e2432c5ca6b389c55c98daf656e48cf0931020","sha512":"d4b67535e7ed1408f720f7e95aa556020802c63895d2abf6f22e462545451f18ff44c014ab3c85d67fa3ac4cd1484cd2faaaf52e70b4fb174fe893efcb445cc5","ssdeep":"","tlshash":"bd71b51ca034cefd696b5528347640307063aa9feb925c81c2fccf293963eaa9545327","size":3547,"data":"","first_seen":"2026-04-20T10:52:57.76306Z","last_seen":"2026-04-20T10:52:57.76306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ppv.cx/_app/CHgA9FoW.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CHgA9FoW.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRzL8GDk91tYFMsC9w%2B%2B2wTybBH71ITBe9fMm%2BgrLfWm%2BimiHMxnlagLnbCJ3kL3frhzxVsoAf025utchGXeKKKXH6OQUZYkfC%2F5%2BJnVdh1m2EN6qUfoOkk%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-1037\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebb65684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4150)","md5":"4c460259474494ee470e8763050770a1","sha1":"d779bad1f5fea864e3b6b122617bfbb77270dc9e","sha256":"752ec7f66b6d8b266396d65dd0d917e138359b921e580c5fa9be6b8bc99aaa02","sha512":"f4eb1bb47204014b19418b86310d31e24de08eb996ef5ca2161061bba795e9f533d742ea3b1b2724aec24193bb51e779793861df2bdfef70d9babacfaf1ec871","ssdeep":"96:F7R0w1okNqTxwz8TeY71M57AjxAQwR2EpUYU9qZXcBt9:h/SkgVwz2eY7y3R2KUYUgZML9","tlshash":"5d810acc308a6979b7a744cc40946251a49cafebd4756e53b0fe8d5533418b0e8bfb34","first_seen":"2026-04-20T10:52:57.752216Z","last_seen":"2026-04-20T10:52:57.752216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DCbhEQXb.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DCbhEQXb.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BXCTK3Av.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qii4huF6T%2FIgW%2FhVlmOZH6sVAELmFtBNhtkyq%2BYoc9A8te7XsQ52dF6cFp34kEJhBmbVpNyHxdJAiwH%2B4AETyOOVWXNzyEzD8ltzRR7dQWC%2F9LrQWAzoFTM%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-6a1\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998aae385684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1697,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1696)","md5":"dfb3390621f51562b5f2bd890728f2b2","sha1":"b8b445fa6e31b2dcfb538390257dbb000584aa1b","sha256":"4682fa4d39f5930723cef5937e73420d919e06ede1094a7a31f1e99b2f5ec344","sha512":"ad63bd755234999b3bd62555059387a339e62d27068661b0b924cbca6591d40d5b898af35aa82f89d9b85862e04d5a783c7bfed942fb31d117dbef26695176b4","ssdeep":"","tlshash":"be3186bab4e295383f1704df49e65115a73101bf1c6c9dc8b03a0d3199f59ab4759f43","first_seen":"2026-04-20T10:52:57.755433Z","last_seen":"2026-04-20T10:52:57.755433Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CTj3ke3Q.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CTj3ke3Q.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEW7U0S7VVSux1tJs6fRSc1jHeKM6O5%2FHveKR3QJZ6SBAd87ht3rP0IkNRLaxJKdSDHgnHgKmcqge5I4NBaYpVCCFFjhTUsbK8hFIcbUk1C3tE7yGBvAyi4%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-3b0\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399834bab5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":944,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (943)","md5":"d799f8c91f612d6eb487046c55810417","sha1":"a28d7b6d049d23eb4fccf65b2dd0955629ac8acb","sha256":"1830d6dc4601123f4c39d8311ef091d97df08158606c9d6614737ab34401f5a0","sha512":"4464e63a3db6642f88f0b61af5cc29dceb269b09d06255e969507651975c4b85708095016516748df3265c7ae5cfb1da2d1312e07f7dd5884e79156b31ee08b7","ssdeep":"","tlshash":"7211105da6cad0fa3703e19db4a22451968d84ed27f12693e0eb085c26613a4c54bf16","first_seen":"2026-04-20T10:52:57.758393Z","last_seen":"2026-04-20T10:52:57.758393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CZ1U-BY7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CZ1U-BY7.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-6614\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aM1WbS8bzIPMjFj2G%2BDCSj0ose3iDgjQAm9bqCz6u%2BW9TnvlI9XvPOk6NfBPpHel34tghQ61sbjIS8uRIMwUCYvJjucwf1oFjQtf%2F2Q57MxSArl2P4t85UU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39988ebc55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16759)","md5":"4e53e554c766e9b9240984d8cc35b496","sha1":"4a4bcc3aa8e79c21f6142730bf7ab302f9fe483e","sha256":"64bcfe3c6fd1458ba9244cf57e71f7984739cab50cb672f7e9f57c9c0b688172","sha512":"978a7d31ce90d21233c361d5bc6c52dcadb96145c8292fd221c2e09c3e6ab97903ecfea57a0b9ea440c663b4f409ed955d80f2ef1b7939b8d3849fa30ec30e6e","ssdeep":"768:n5k0cHher3RivTPYgY4kXKEcECj3+U9AfLrJM3lnmnjP6JvXpiuXRH0r7MTWumJA:5k0cHher3RivTPYgY4kXKEcEkQJGUnjM","tlshash":"60c2c848b20aec39293760a11858ad80f96c5e9fd731fdd7f3f9886817c847875a729c","first_seen":"2026-04-20T10:52:57.760875Z","last_seen":"2026-04-20T10:52:57.760875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BWyoOGMf.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BWyoOGMf.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HJ8xGXeuVEyw2ls%2BAIE2Hsda5GA0IKbfxqyoej8INc7OssblTKvUELPeC5htXkdFb%2FsxI8fk0Sxfu4d0wMhFtD6Hxickpk%2FTF7OE2rqUFfHTHe0BAIsl1g%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-ddb\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998b2edc5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3547,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3506)","md5":"382021c8281e92aefb928b9c350445c6","sha1":"45a4fdb59b19e7a6d8423007ad8887bb0d4f5d3c","sha256":"74be4870497d1c756728fb2aa6e2432c5ca6b389c55c98daf656e48cf0931020","sha512":"d4b67535e7ed1408f720f7e95aa556020802c63895d2abf6f22e462545451f18ff44c014ab3c85d67fa3ac4cd1484cd2faaaf52e70b4fb174fe893efcb445cc5","ssdeep":"","tlshash":"bd71b51ca034cefd696b5528347640307063aa9feb925c81c2fccf293963eaa9545327","first_seen":"2026-04-20T10:52:57.76306Z","last_seen":"2026-04-20T10:52:57.76306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Chat.BXfShMhN.css","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/Chat.BXfShMhN.css HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 4\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BmnS7iwwj%2F4NCS%2F%2BWM5A1kNH9jIyT8TheddjoGo6e92YQ0C%2FfuLP2DGPx56NtBMIrabaXUn6JDoxM5sGtP10Q1vfiJyfmx2Qzof5WUS1NPCjYq%2Bp9AbyUs%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-281\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998bdfe45684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (640)","md5":"017005c8aa8e8ed7645ac65efba4f13c","sha1":"de52073bdcfd8c1a0760f8c1ffcab8ffb4ebc97c","sha256":"76337cbc5604ceb7d64e4a5399a00b51d64f6bd0b7ee17f35434de7559cb3f9e","sha512":"5cbbbcf9d8440b51472ea4f03a754df1d23df18400a9579888ba6665e857b0694b1b3430fc801396127cf9b59b8630f5e4d0f078a9b7138f424aa7f683b79be7","ssdeep":"","tlshash":"7cf09901624e004ea2fbe83ceca3720d811aa153ca0f05a95058de39cf873e27330503","first_seen":"2026-04-20T10:52:57.764898Z","last_seen":"2026-04-20T10:52:57.764898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/j8Z5QhrA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/j8Z5QhrA.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-5a7c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdPRyoJv01SrdlhDhjv8II6mrQuEd73qwmDPd%2Byd%2FYVz3khwu9I%2FZN5NM3A%2FvaPtt27MOP4EO7v%2BQ4urXShGCrlCvFq2IlhaCo4sqIZpdwIHOg0Oheavy1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998be8095684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23163)","md5":"6a5bcc8f0b71efc45bddd2985747ab8f","sha1":"947014194cb14d3320e9814338e9b4207ccf4d96","sha256":"c98310acfbba8ae915c36e645efdbbabcdfec1bbc55efda07d8b540378724543","sha512":"0063535714d50cf7a3cfc1e7d87c065c2c3a693b3bcae848b96674189b19154a0c62d6a492fe42dcaf660b79a898139bfd9e6537ec981c3d09c7ffa057723959","ssdeep":"384:lP1gZ28fANy72FpAekjcLSfcQa2Zr4FxCKTw+DQQ2zzwiHmcT+/T36C/LNd9P:lP1gZ28faqmKekjJE254Fx5TvQ9zzbHI","tlshash":"3ca2f72ab421d8bef673109879fa410571580fbfc04089d2f0fd8e1127a5e76e9af369","first_seen":"2026-04-20T10:52:57.766636Z","last_seen":"2026-04-20T10:52:57.766636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/assets/noise.png","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/noise.png HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 16812\r\naccept-ranges: bytes\r\nage: 0\r\netag: \"69da1299-41ac\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3T5%2B%2BBxnXeQ0ngnfqpNvrC5lTO35KVp7C8jIjYvkCdMdJ%2FvpV5gkKPVzpyVuoVC1TBhfkGJeZs65J0cjJvFjX4ZxhF8tRSuYFNqZCTnehzO7nvwvLd7O2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3997f8e945684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"fad5b1dde220831abc0ab9bb569a3f33","sha1":"389fac3a25b1731ffb1b2d27c64e2d6852794b8b","sha256":"a148273914b2eba2adcf52b516482fbd32327c34e33a433cfd4b2f218b819e4b","sha512":"86789111f1f1cc138f2885a950a4b131b8ba74d36dfd30ff5782325d8c85d3aa241b303faf1d2cc4fe0980951461122a1e7eafce6bb4786d39b60b175bcfa0b1","ssdeep":"384:2428GJkm+pfbNhQdnfLWOr92JKPqJa8HegEabC/+G:c8jdJNhkfZrFyHegEv+G","tlshash":"ff72c0110b5a4ad06d6c95fa3dc6ac273de206508bd0158f67ebdd028e50993d371f9d","first_seen":"2025-11-22T15:16:03.699801Z","last_seen":"2026-04-20T10:52:57.768317Z","times_seen":11,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/D48aHa0e.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/D48aHa0e.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 221994\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-983be\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpBFpv6yyHqc08EwbAMjVwyrL%2BuS2eYlX4XBzp%2FFA6z%2BDhEbx%2Beu0XOmSifwthGQEr4WxMGAamBbF23zxRZAIMKHxr7e%2B7htembl2TRuLqz7xW4Vcx8yCLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399801f3d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35876)","md5":"e85b70d1b90f37203c9d4acc7244bc10","sha1":"f45abdf6852fd0db0bf790a7fbb2f01265c50b6f","sha256":"b0da5428b09dfa6c9c10b743fae5c654e1e6c3ee453def3559f928c1faf60cda","sha512":"eb963cdb4ffcc6c2fad4e2d7c306189b70f3fa11058235b562959db04b02bd5ca48a87d87ca3962103882520800235592ad2733d2821a96fe9ad78bdb33d567f","ssdeep":"12288:O4hg4iqzL+ILLeb+rqnA8+DvvVXeweRjDN6P8YPIT:OAg45L+ILybf2XeweRjDN60YA","tlshash":"10d44cd07189b46a1bb709d5607a5401f22eae58b408d4d0f2bc9dbe3b9b850b677f3c","first_seen":"2026-04-20T10:52:57.770392Z","last_seen":"2026-04-20T10:52:57.770392Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DTAcx3Q0.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DTAcx3Q0.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CxzOo3KN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uoaRJ46gix5SoAozYWrXuq2iGAy0TqXL2rJ3BInN7vXwe%2FwVEXY15yAlRmnZ0CNNIady5kQJ6Jxt9SpA2SvY22PKtOSsvUAG3gjkRBTsK4LNBAJyNID2hg%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1936\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998199575684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6453)","md5":"7bb96c6986f1c79d3f097469b1e85ddf","sha1":"b15d46e9a2a47fc24c6a2a2a442f9d78744b2104","sha256":"597447e3c84275a32e270934bc9deb6baf46c8f458f8a70d7c0101e0452e26d5","sha512":"f40e1c44a8c41a84bfe392d744650158507871af33e6b0bae43b9aeee22cab258cf230dca75a08c56f9f2bcc4c40c82e2ac195c627cab26a56b6c3da83c2e870","ssdeep":"192:hFjX7wFrspc9eogRb4k6UB6LhY9/rX5roUdRdcsjysq:hFT7c9eogRbB3BK","tlshash":"12d15148d514ee3a18937099c8e5b450f06daa54c735a7a8e0fdc61d5f20a41f97b39c","first_seen":"2026-04-20T10:52:57.772155Z","last_seen":"2026-04-20T10:52:57.772155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bakv33iK.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/Bakv33iK.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11943\r\naccept-ranges: bytes\r\nage: 39\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-8b07\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnbNrEChYKIxiO0mGGy%2BMRNYyUEhHUm%2Bw95z29NAK7hhOyVh%2BxkcZpfWy3woQLMctD4OsrNxbA43lSUeavVmTa0p1R1ZebEdoW453v7edvLBwU3QjatxzTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399834ba85684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34187)","md5":"805434a7cddc6c7feeaf901e1da8bedc","sha1":"7d7367ba2340abc14cadbabb617cc35b8ff2e67c","sha256":"e2892d9c2d4b3d31a0a361fb7599241b56dee0daa2dfa120cce572deec980634","sha512":"60a58ea3e9c89fe52c858b40f357d474333efb0f9167d6065639ff538dec068e21d232357dcd7ac8ed1c4129fc2e8419b32b52bac752365b2facd7bdc48942df","ssdeep":"768:d7HWFbWQsmMHBxOcpifkU9YqqzcOefCwjtkzlmiNlzaTtTuAfGTpkXlKkX:dzjnUlqzcxCKSxNUuAfpX","tlshash":"0ef23bc0744caebe2d6304c690b7a420513e970dca6568c0f5fb5e785be6da0b65fb2c","first_seen":"2026-04-20T10:52:57.773504Z","last_seen":"2026-04-20T10:52:57.773504Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/api/streams","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"OPTIONS /api/streams HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-cid,x-cld,x-ctd,x-fs-client\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE\r\naccess-control-max-age: 86400\r\nx-time: 1776682348\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbajBpMCaFF1Z9t37Jf%2BR2L0bqhM%2B1ed%2FYGQitvzEfNxPydaqiiBfVlCvbJFGhWmvGvTNn9pSVuprjpXRrtYDL6pXstRsri1V9lbrC5kHxknjJWrpCnsFjeMyg9y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39987ab9f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T09:48:57.028044Z","times_seen":16383237,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXRpD1D3VCOmpnsJ5Rn0UofsuakEZ4Jr6ltMFqmZ74CfN%2F2mWkm%2Bhm1EpK8mH11Hq7tvGq6ACZkyovTmXJ359ct6%2FDDwOSMHQzrDGdLep8fM%2BqdYFbUI92c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39987b9ed5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BsN4hVl7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BsN4hVl7.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BjO3HPfu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDIqonlArPFI2aGhH6f0s2OFYczCpLck3yNOmsc8yGZenUKuPm%2BSG9VHy%2FruJo8%2FI%2B3xkLfDdwEkK60sX4nM5TOk5AT9AV82gdjmdrhffPSGFmF%2BUst8xJM%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1ba\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998a3d915684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (441)","md5":"1b5bc2061b7a2f73f64be1172e271754","sha1":"215c8547051fb61fe7efd3bd511816a2742810a6","sha256":"24c60fea76ee03fd0ae8d724b45c6d97975a7cc3db3700d44f581416e555c71f","sha512":"774d5b5c369a53c57df5615c2fda81ef27b3bd5a6ef2efc4d8ece1830577882c863d3a40a3231dc5aaae4935fb4e609090bcfeaa7b0f742ec7840342885235a4","ssdeep":"","tlshash":"bcf0a34d7948dd7924165c89113adc24452fa85dd63cb1c0e1417d74b7c849c731b728","first_seen":"2026-04-20T10:52:57.776266Z","last_seen":"2026-04-20T10:52:57.776266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/assets/thumb/cba89efff75e0e466a2fdf56a1044a11-thumbnail.jpg","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/thumb/cba89efff75e0e466a2fdf56a1044a11-thumbnail.jpg HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35825\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 12:04:24 GMT\r\netag: \"69e0d048-8bf1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gH3Fnzkeo0CjlvpMV2vuVSXYiCSXuHSB5SRzMZhHZam7P1lYxDAMjtWP4K6OjGhXGVTDHaIwCKubBQbx4XT0E0UusZJwl4xDCNPtGmK8lBsaER9BofPZPJ8Du64a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a4dc15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35825,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 300x170, components 3","md5":"1713b8adcabd4595a8444e3630f59e88","sha1":"f9fbe1c20cd1cda27136962da4e7e6dbf65eb542","sha256":"63ceb0c9ba6550aa09a382d44855243930b49dbec41bc44017f8c83bb350766f","sha512":"a541b591eb4efdc329ecb790a283c7c38d658759e73aa6039f0596b523128f0c80b848a20dfcd15e58c30ff7189c1d694661afb552913837ff730b260d0f0513","ssdeep":"768:zp3b3iIHgCxZ2pFY3IIrtYDGzQuJ9PNueKtHdT07JU66lBfRE:z1bHHlCe3Iazv4xAn2fRE","tlshash":"69f2f1deb4376b592f850090654ce3d9134c9dd7271b4e0cd9bc5df63a4a2e02ae0aee","first_seen":"2026-04-20T10:52:57.777598Z","last_seen":"2026-04-20T10:52:57.777598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/simple-icons.json?icons=discord","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 03:17:08 GMT","end":"Wed, 24 Jun 2026 04:17:04 GMT"},"fingerprint":{"sha1":"C7:61:00:F2:D5:FE:2C:00:75:61:A6:53:17:66:5C:87:6C:DA:E0:F3","sha256":"5F:1A:78:B0:83:6C:E7:52:BD:B4:74:DE:50:8A:44:F2:0A:90:8A:03:24:08:4A:D4:F7:C5:AE:59:EE:6A:A1:8B"}}},"request":{"raw":"GET /simple-icons.json?icons=discord HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2FW9TdpCJfpAIvE0GLuiqVRKv%2B%2Fi6Lgr4FVOLB4FeTZDMQoY1w39OgqKBSDJhEz0mY%2FD9eCIL4b3R4nqOb5Jjb1IMtSF9Ko8u6FfTK%2FlEr0O2Z2ux0kJ%2FfzGSoShWLwurw0XTw%3D%3D\"}]}\r\nlast-modified: Mon, 20 Apr 2026 10:52:28 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef39988899b56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4925e565672dab2000ba8b23ab7d8cbc","sha1":"07f50357bb2915695f0c99a2eabb97f83f635db6","sha256":"10e48fc4f8e43c9ac13698d13bc5d84b99c44d282b76f6ad31e1d25c123f3be0","sha512":"5d5edca6374398fc58b6d6aaa7b316e54c89537036725e8e30278772057239323863ba7266c3b135ce0ca113e6f285e06a02a25108e6fe5b29e1a364a3c3a977","ssdeep":"","tlshash":"c521eba6026d80dc086b761d9f2be849630fb4b735a2efc69e9f5324a453f00f94bc00","first_seen":"2026-04-20T10:52:57.778934Z","last_seen":"2026-04-20T10:52:57.778934Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":60,"dns":20,"connect":3,"send":0,"wait":36,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CZ1U-BY7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CZ1U-BY7.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-6614\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06DbliO%2FzMDSxHbKO9uZleuxruNILItuAPF7SuqDcUqIXfw3WtbUwzZa7mMjkA1WPSC2uMCZhulUEQdKvcpyiQEzuOEQXqj14SY1nDDD0%2FR7kuf7VFavi4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39988bb7d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16759)","md5":"4e53e554c766e9b9240984d8cc35b496","sha1":"4a4bcc3aa8e79c21f6142730bf7ab302f9fe483e","sha256":"64bcfe3c6fd1458ba9244cf57e71f7984739cab50cb672f7e9f57c9c0b688172","sha512":"978a7d31ce90d21233c361d5bc6c52dcadb96145c8292fd221c2e09c3e6ab97903ecfea57a0b9ea440c663b4f409ed955d80f2ef1b7939b8d3849fa30ec30e6e","ssdeep":"768:n5k0cHher3RivTPYgY4kXKEcECj3+U9AfLrJM3lnmnjP6JvXpiuXRH0r7MTWumJA:5k0cHher3RivTPYgY4kXKEcEkQJGUnjM","tlshash":"60c2c848b20aec39293760a11858ad80f96c5e9fd731fdd7f3f9886817c847875a729c","first_seen":"2026-04-20T10:52:57.760875Z","last_seen":"2026-04-20T10:52:57.760875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CZUAfUxG.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CZUAfUxG.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4330\r\naccept-ranges: bytes\r\nage: 17\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-3083\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EaHzu45pzFiTy1T8COcwyLyPMU1oD6L7Dzm0p06f4hep9iyLPY3zrsbMMQrCtySg4aYdAHQ4Q4lE9VXwUXiliMSAXR7oHTqoySonqZSLZXpFYgQFI%2BnVy3Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39988dbb35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12419,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12417)","md5":"892573e55ba29d7c03dadf5000844e87","sha1":"c7cc6454734a71533ba131807738321a947b1f7e","sha256":"83876967eb957d1675956df7918ef8d25eb771d60df263a4e02a3d69c8b96b21","sha512":"5ea44d377b4137feb65be701cae67472937ab91e13ddc94d2f5738c24d3319aedbaa522c0234212f79a1e0df1fe54cd62a464738f0905c0298f751c4ea5992d2","ssdeep":"192:QZugay/NV/BtpM+SA/nTwazqzfd2Pz/Bcgs13z7/kZd/doPme12nn9gdcw8UYUMr:QYFOVT1LvMH8UYUMIgXQ/h0Qxs","tlshash":"3e42a54868059eb4dea71571a4d87c10b11c1fd8c232e4c5f2fe45b867c69bebb8b368","first_seen":"2026-04-20T10:52:57.780331Z","last_seen":"2026-04-20T10:52:57.780331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BjO3HPfu.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BjO3HPfu.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2LeAGbB8b0%2Bu9u5axRklwtjOWEb10LUOYkX4hwePBc6MLVHkfgtroVhQOTcomV%2FDkhx9aXs9Vpq1PinIwYT8U2gRNqMKiDqGKtqxli6vT%2Bd8Ozyd053Q9M%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-146e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebc85684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5230,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3423)","md5":"984524ffd61352a07edd12c5c443e536","sha1":"9c4fbe6cf265f4611e27dd4a69fd187523e37f2b","sha256":"437fdae99734d579d1792d91deb272b5afa6281da3b56a417939708c4e3edb3d","sha512":"72a14e0093202fb24267ce38f229c7d27f507d271f75843d7330874c75289075427f6b30dcb2415ae7b9854650e440583afafba8a2d93874610c03217cf0d78e","ssdeep":"96:Lke3F/wb0PXUYUtZdAw2Yn/RWpZ72MVgY8tp32ddm9jU2H4fMc1vxaJXC:LjIIPUYUtZdAw2k/NS6oejHYfMWpalC","tlshash":"1db1e89aa021db7ead6310445ea66702712c67efe3e19de600fccd361425d6be07bf10","first_seen":"2026-04-20T10:52:57.781686Z","last_seen":"2026-04-20T10:52:57.781686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/assets/thumb/a2cf805dffdccc77ad6047c4c04f2f33-thumbnail.jpg","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/thumb/a2cf805dffdccc77ad6047c4c04f2f33-thumbnail.jpg HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15588\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Apr 2026 05:01:02 GMT\r\netag: \"69e5b30e-3ce4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=556EDS2lllplOlRYVITMT25d5y96tC%2Bc8lVfNQaZ4YeywNPymzZL2iHgEBoYy5hZLuD6u76QQTTdS3%2Fkxt%2FN%2BmlcNCIyCR6wHEbN%2FS4EAqNZlnDevDSrdRKpWK2%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a4dc35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 300x168, components 3","md5":"b102c19f77fe33b9a1d39fefe55b3970","sha1":"8bcf6eadbdaafdc84da159526f311d66527dac6e","sha256":"8ce7fafe12f524bf343ab4072539d8a325cd4ed4199b66e396a934627d1c2e0f","sha512":"d2964220093e5d34602ef7a270971582b9677a3affa0720dbe117bcd5d058450641822b85ecffba3c9304a2d9e5685ff4d1c89c01e82c2b421fba3851320f760","ssdeep":"384:R1ch0zTxZsMcefefeT8lYoZY2rIXcqyQlXOx:RJDsMcefnolYou+kcmXy","tlshash":"5c62ad2306996865cef08ecf319ed3e0bbdd2d1d8823ee8b0b915315253ea4424dd2b7","first_seen":"2026-04-20T10:52:57.783249Z","last_seen":"2026-04-20T10:52:57.783249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBSOeQUm06eYTHN8p3fFNUDzgEsdb6suxEjzqk%2BySXJTItoeWZq5o1ini6eoAjNrGWNAbiEzU0MObBKVlaP1PtNzG0rDQg%2BIJac%2FwvDKvu9mOohz9VS8ixA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998b3efc5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocRbk2F1%2BDPKJ1tiTr3SGu89AgbFiMB8%2FZyQrg1c0ZfA%2FEJZBin5gPZ66ZxZFfBQFCa8%2BkWz89ZbkLUcPHNBOWrIufGs8x8pI4oLOvKnFP%2FkAoqKHp%2FQueM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998b4f085684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/nRU2woX_.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/nRU2woX_.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BWyoOGMf.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwamluEdbDc29zDl0wARIi6cDjcX8STNm9UoKBmRALfRN37bmmPTfv45atz4kiFokcP4r9rgWl0%2F3Ti5MeZSfzS0um3k1M6XWfvVYuOmZMlHlmKGydRo7Bo%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-25d6\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998bcfd15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9686,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9685)","md5":"053794b9bafed3f699f125a1757b7eeb","sha1":"01f4c99027c26979a78d2f4fba61df308d33cec8","sha256":"f404891e2c63a9dc4bcb1d5f4a5b5bc9d8a84012393c54820a1336d68c70ec27","sha512":"7017e4592ff01c1b3e3be90cda34385549ce6ab27982f1d244266b1344f87de13f7da426a5dbd49a7805a74b3d2ee44d55d0b5627993ea310babd6c050ada9eb","ssdeep":"192:6voXP14RYDy2+l4QoDSoi0VJ7K6o6pmNOTUlBlWLZG0k46Pl8a7pv4TwImR4Jed4:6v5Y1+l4BSEJe6poN4UlBl+1HaJ4TwlK","tlshash":"62120ae57bf1f231079e15f8927742013128196c304ec4f2f0ea6dba34aa5c5c86af1e","first_seen":"2026-04-20T10:52:57.785056Z","last_seen":"2026-04-20T10:52:57.785056Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bw3RRejE.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/Bw3RRejE.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2Flcn3vGD3UHrK%2BCXuWrrntGYC5tZJVQp1ihyWsrohFxCzSS%2BsQ6f4UHc5nwlLV0xGpPQwD7TEz%2FxCkWYvm7DyokArG%2FL3aWy%2FRJEHfsLrTjr8k8KGB8F0g%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-955\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399805fc35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2378)","md5":"f7bb9677f3bec750eeb66facd141ce55","sha1":"dda24ba14497117482076b5818da07c77cfe2566","sha256":"5afeff085180943a03b9790f24a9d3ad8c1a08c63640a21b423951732ae76ce4","sha512":"c05c713183fcfa5824c53613a18684fd0e62115073b180fb9926b2af0cc3b67c4b12ed841644870c36b30ca90510f9b6747a71d57513b3854eb3a50bf74ef71b","ssdeep":"","tlshash":"6441454cf805c6f8f697c089c029ac20f98a2edbd5667656f1fe560ad0c586b2ec0318","first_seen":"2026-04-20T10:52:57.786472Z","last_seen":"2026-04-20T10:52:57.786472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/lucide.json?icons=arrow-up-right%2Cmenu%2Csearch%2Cx","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 03:17:08 GMT","end":"Wed, 24 Jun 2026 04:17:04 GMT"},"fingerprint":{"sha1":"C7:61:00:F2:D5:FE:2C:00:75:61:A6:53:17:66:5C:87:6C:DA:E0:F3","sha256":"5F:1A:78:B0:83:6C:E7:52:BD:B4:74:DE:50:8A:44:F2:0A:90:8A:03:24:08:4A:D4:F7:C5:AE:59:EE:6A:A1:8B"}}},"request":{"raw":"GET /lucide.json?icons=arrow-up-right%2Cmenu%2Csearch%2Cx HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88nNXMxwd4C%2BPtEyJ0KdUpoGS83SYk5njVVt1PhdEGY6oDmzrIM2k80s3KemaXZ23%2FxlPefg9VvjaiaoXYLgBPFrhdtuuiOrzFaemJX2qhjxEHR0cuCMShZPfoEl27d3mSHGUA%3D%3D\"}]}\r\nlast-modified: Mon, 20 Apr 2026 10:52:28 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef39988798856a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":788,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ca18ce0d990ad539d412e5c98365f797","sha1":"4c6aa2c6805a5bd6aadab2c6285a3d95bd0e1c71","sha256":"072a04a220a9a3b41c05907f0f346af04057247361960e3aa30f316d43666fd2","sha512":"ba9bbeb09dda140f61969051cff484dd0cb38f2423d490bbd914b1a51348c630fefea9b3cc94600d8271674d008d2f3ee950cb5fc5066f07610ac92ad5474720","ssdeep":"","tlshash":"1301f5083334d67db4262159db687b1908a233413642220469bf41703230b3e69f3ee4","first_seen":"2026-04-20T10:52:57.787743Z","last_seen":"2026-04-20T10:52:57.787743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":54,"dns":21,"connect":1,"send":0,"wait":36,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CT3IsyzA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CT3IsyzA.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fX4GduYAXtyvLR5FfQl%2BG2Sz0%2BGyPyafg9RBkGOROFpWzMvVL%2FFwSQjSd%2BGSbzI1sT1nI8Q598JCSzWm8ri%2BvZXvBiygdpxxpPlVH5Y1a%2B4elvfs8y0ED8E%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-5d\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebc15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"ede88729acd85750a1cb2f0c74c60b84","sha1":"005bf1abc3556974915b172271816706369a447b","sha256":"b3fe68357a6050cbb8749315b62a9cb121f1cf697bcb36cafa150a60a1e5c7d1","sha512":"f710b42642e26a35d896b84c27118e607dc0b5996e9f084556a0ac8c353e018c766de08d74f3fc2edb46ceb2959c3c2d2d992b959e0abd50ebc1d293f02cef92","ssdeep":"","tlshash":"dcb012c3a141615601c2248cc5126419977752b6624c1530944989a0732637c9217885","first_seen":"2026-04-20T10:52:57.789155Z","last_seen":"2026-04-20T10:52:57.789155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CZUAfUxG.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CZUAfUxG.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4330\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-3083\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiGRBD4e2fcBCoik4AtUHIWAzH4UdbrGShSYCcCL33LPR2P3pKH9Fx%2BlCyTFxX7r%2FVLe181YviWRogwo5TnwEnnG7BPnucFu4XJFONBsQ6F8UdHqpXH68K8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39988ebd05684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12419,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12417)","md5":"892573e55ba29d7c03dadf5000844e87","sha1":"c7cc6454734a71533ba131807738321a947b1f7e","sha256":"83876967eb957d1675956df7918ef8d25eb771d60df263a4e02a3d69c8b96b21","sha512":"5ea44d377b4137feb65be701cae67472937ab91e13ddc94d2f5738c24d3319aedbaa522c0234212f79a1e0df1fe54cd62a464738f0905c0298f751c4ea5992d2","ssdeep":"192:QZugay/NV/BtpM+SA/nTwazqzfd2Pz/Bcgs13z7/kZd/doPme12nn9gdcw8UYUMr:QYFOVT1LvMH8UYUMIgXQ/h0Qxs","tlshash":"3e42a54868059eb4dea71571a4d87c10b11c1fd8c232e4c5f2fe45b867c69bebb8b368","first_seen":"2026-04-20T10:52:57.780331Z","last_seen":"2026-04-20T10:52:57.780331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BWyoOGMf.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BWyoOGMf.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moS1clP9gkDlLCsmhqcD6dYf2fENLZ%2Bx5Zvy8VUz8WXEbBZRokPE1ZHrAiTBPRRfKLZZS%2BTaN7nHAxo3%2B2r9xj8crHK4YsPmvcJwvepLsXvZ3XadXNnfgNI%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-ddb\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998b2ee15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3547,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3506)","md5":"382021c8281e92aefb928b9c350445c6","sha1":"45a4fdb59b19e7a6d8423007ad8887bb0d4f5d3c","sha256":"74be4870497d1c756728fb2aa6e2432c5ca6b389c55c98daf656e48cf0931020","sha512":"d4b67535e7ed1408f720f7e95aa556020802c63895d2abf6f22e462545451f18ff44c014ab3c85d67fa3ac4cd1484cd2faaaf52e70b4fb174fe893efcb445cc5","ssdeep":"","tlshash":"bd71b51ca034cefd696b5528347640307063aa9feb925c81c2fccf293963eaa9545327","first_seen":"2026-04-20T10:52:57.76306Z","last_seen":"2026-04-20T10:52:57.76306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5Ndngusm6owzM68BwIsVIYsKnVHXYMexX%2BV%2FRVM2Nk7psv1snId6xim2rv2cXDDutNWV5q1hG0cLpNQN1NSREYxoOGc8PbI704nSkNShohpEqqwbo6pWbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998b2eec5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/C2ez0BML.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/C2ez0BML.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CxzOo3KN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AvN%2FYZGRhFxvdwsF0ME49%2BuxKky8PBKN3SNgj8UCa2fXhwd%2BDsA2yC7csaovewAz8GWv8D%2FFtdl93yaguIn8EujE2KGKVimsu%2B8x3Kluc5en%2Ftr7jrX%2FOs%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1c7b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998199635684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7290)","md5":"91c0e40dea17ff183003d9140389859b","sha1":"81d997df809ce9e0cc6f5aa0f3818cb1fa78b367","sha256":"4a6fae422ad4f6f3212debbf586c4da7de7f17525c18e1373d2d4911be61ed76","sha512":"921791efd6a41b36d4766466c003673c452d177932f688cd8d680c0a0522e1efa4f6f3441b5558481d112fe397949602b1e870bdf02089e2e8a16e97447d99ef","ssdeep":"192:dX70bGLfVw0d7cqjcLZdo8Vj3hz56rwy6E7yRz2r/p7DjnP1R1GP:VoaLf20d7TjcLTVlNiSE7yNIpDjntHo","tlshash":"cce16574b251637913f53cf0a1368e9ba2633a743cd4d1d36a0ec9773512846bae3a39","first_seen":"2026-04-20T10:52:57.790644Z","last_seen":"2026-04-20T10:52:57.790644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/assets/7tv.json","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/7tv.json HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 4443\r\naccept-ranges: bytes\r\nage: 31\r\ncontent-encoding: gzip\r\netag: \"69da1299-3681\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQsYSsvk36eWGE6i7ySJ1xJZFWp1BkmYCE6Kp4BshuYgn%2FojqhZxQc7QB4AAnV1X0dzLzv45ZIsB4LpD5Eupw7NvC1BlXJmQa9WlWMM7SkdmmMtUJoZ3ACY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998668255684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13953,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc0dfa37a6ce094829398e0baef94809","sha1":"cbf426b8eb041fcb8ae82c27c11614b1197ffcdd","sha256":"3846f9c75ffccb55f02191f295d1d597d6e461839c2cbc84dd7c81c8f02b2a9b","sha512":"2ec28455dc603588e4aa7da35bf579e958e3163b460af085b0f4b5667a798d4065c137f066ce343aa28ece70f6cb9e7aa827e182e6842e6f7bcbf957f8342f58","ssdeep":"192:uw7HiESUgxII4+Kf8BV4ocqF25tZqwGPvBOKpnSgou:B0qXf80oZF2PBzKpnjz","tlshash":"b352c5f2ddb11c4b990c51b438be9b4278705793196ebc073e8918ad2feda1e683471e","first_seen":"2026-03-05T02:29:35.125752Z","last_seen":"2026-04-20T10:52:57.792577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNGIj9uB.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DNGIj9uB.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-76db\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oP83vCkpvF80Zs6AFOhg0ncvCqkLCyDOSOvE5XneMp12BR0YWa9fZYJuLdGU3ySHuEk9mHDFdjE0rulS%2B8wISZPg%2FiOvG3AM098TzfVK%2BmaDdv5D7nb%2Bd38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998be8065684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30427,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30422)","md5":"ec95cf03fcfe285374a07df2fba47ac8","sha1":"5a1560a44ce32ea19e154318d7961a76dc432d30","sha256":"dab4ccb615599122b2119af3136b244351fc3e20d239822df10b4d43a8565cdd","sha512":"ba2d3f94d30f83e3e36df55ca14d79fec2e41aee4426fbde0467c80f490e6b0f6d1e9326c560754764e45d44918c495d1c47775d398eb9ac2f7aaed0b29e1694","ssdeep":"768:9qt4ygiMxSIxxnB+U9AfLYnye/EgMc+TAJdRhLF8ESigv:9M7y5LBETpv","tlshash":"0ad20804b106ed3a697361956800ad80ba284bdfd271fee3e2f9c97d27d4c7435772a8","first_seen":"2026-04-20T10:52:57.794336Z","last_seen":"2026-04-20T10:52:57.794336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/D48aHa0e.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/D48aHa0e.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 221994\r\naccept-ranges: bytes\r\nage: 39\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-983be\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYgz1jgYfjAc7NFPBt7qaowEgMQW%2BgJsX5AtCfQiAcWlAFuG5IoA1Zv%2BNUcVcWjUtuZMyWiynmHeoS%2FF%2BPsAvyYcAWS3Cmr97Efy9n0OwofUKitwDKL4omE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3997e5d225684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":623550,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35876)","md5":"e85b70d1b90f37203c9d4acc7244bc10","sha1":"f45abdf6852fd0db0bf790a7fbb2f01265c50b6f","sha256":"b0da5428b09dfa6c9c10b743fae5c654e1e6c3ee453def3559f928c1faf60cda","sha512":"eb963cdb4ffcc6c2fad4e2d7c306189b70f3fa11058235b562959db04b02bd5ca48a87d87ca3962103882520800235592ad2733d2821a96fe9ad78bdb33d567f","ssdeep":"12288:O4hg4iqzL+ILLeb+rqnA8+DvvVXeweRjDN6P8YPIT:OAg45L+ILybf2XeweRjDN60YA","tlshash":"10d44cd07189b46a1bb709d5607a5401f22eae58b408d4d0f2bc9dbe3b9b850b677f3c","first_seen":"2026-04-20T10:52:57.770392Z","last_seen":"2026-04-20T10:52:57.770392Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/lOG5DMGY.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/lOG5DMGY.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CxzOo3KN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-4100\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 0\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUhepXcfghNzovH8Lr6zrPtXxsm5q0pMTS3kb%2FUQGFUeOvUMZQuZ0%2BEJlN0iGVXN4gOZRgz1xNDx6ehu8hK6H67IjiP30leBnOd6CW017WIMBe67PadIdoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998199655684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16635)","md5":"ccc0b28751d6513f305248ffeb5791e4","sha1":"6093d38e265f512a72ffdeea7dc33a58b2293be6","sha256":"4897e21d071cab4a60b7e9b05d9b92063b8a7e414401005d6e6fc6cd07dca3d0","sha512":"3577d4470c642c0b09f7e5350c6809bacb5fa86ecca23a4b148347c3884c908acf4a6242e59814a2c34b593dd781413fd404f1ed5ecc0c6f2ac718b5038b320a","ssdeep":"384:EWH+ZTbXUH3j//bEPhXgA51/CBhdAAf9IK5qM:EmUXUH3j//YpXgAP6djf9f","tlshash":"e172a69bb33a4e8b743e7bd7cd968f4dc9ca555321c0f178dbeeb68169a00568270c90","first_seen":"2026-04-20T10:52:57.795824Z","last_seen":"2026-04-20T10:52:57.795824Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BjO3HPfu.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BjO3HPfu.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 34\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y25m8ARm%2BREU%2FWkvB1cb%2FhJ32V4RQLOK5BaI3ddyQjOn3ymO1sbHa6JfdUnP%2B56d%2BePB3i4FTumnOcaZb15Q%2B5D312alKfmkh%2BQcfMP6Rf%2Fuvr0u9sOBH7Q%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-146e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988bb845684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5230,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3423)","md5":"984524ffd61352a07edd12c5c443e536","sha1":"9c4fbe6cf265f4611e27dd4a69fd187523e37f2b","sha256":"437fdae99734d579d1792d91deb272b5afa6281da3b56a417939708c4e3edb3d","sha512":"72a14e0093202fb24267ce38f229c7d27f507d271f75843d7330874c75289075427f6b30dcb2415ae7b9854650e440583afafba8a2d93874610c03217cf0d78e","ssdeep":"96:Lke3F/wb0PXUYUtZdAw2Yn/RWpZ72MVgY8tp32ddm9jU2H4fMc1vxaJXC:LjIIPUYUtZdAw2k/NS6oejHYfMWpalC","tlshash":"1db1e89aa021db7ead6310445ea66702712c67efe3e19de600fccd361425d6be07bf10","first_seen":"2026-04-20T10:52:57.781686Z","last_seen":"2026-04-20T10:52:57.781686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/AQtgKtpx.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/AQtgKtpx.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BjO3HPfu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENAKGh%2FLs38VCazqk9WLa0sO1CfYiunhbXQLxH6ljGq4gPD4l5oWmmwQQGBEYZ8%2FgTv8hAGnttpR9a5r9W084HYJj0pklpo142o459VM7%2BVvLeeqZrisEec%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-ea7\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998a3d8b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3751,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3750)","md5":"60ba502a9cef8b4b1bafdcb7f0cd2e65","sha1":"ffb29c4d467235cd03f2df69377977e9770dcd30","sha256":"b974cc7be3bf485f8f2b99a82547194b6f438ce8b86c8591656f5f2868cd0810","sha512":"a77668de49303f6d56f5ec99ca614440a772db15f77a5587f02d5a5fd49d30a17e282f55ee55e3a38e7f78ae4ea22d6eda1e9d5d85cfbe422a15c6a2364ff59d","ssdeep":"","tlshash":"c77196c89d4c9db2d95b18d84874e830b27a8744c531a081e1feaa7c9345dc9bf0b3ac","first_seen":"2026-04-20T10:52:57.797771Z","last_seen":"2026-04-20T10:52:57.797771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CaPMEfcl.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CaPMEfcl.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CZ1U-BY7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 78204\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-44009\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2nX2grbkXxNE%2FT5ww%2F2WT5S%2FmBgRRcsmYA5kjdWjxESZqqW1xnNpGyn%2FZuxKOv9SuZZ4AV9koqp1AeBT39gugybgvZa8xlu5lBv7pAtaatmRBB1%2FzIGLbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a3d945684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bc7cea95879fe3d6e8ee6308e3f1b276","sha1":"075b61285fcc765f5f20bd56169bee5b8e1ce7a3","sha256":"4713b6e4c83fd9cb6e3f14eb601202384a82e357ea6627d6c6f629ad68ac171c","sha512":"43fab96168ceff1bf41ee46008cbba9acbb07587d27d3dac7841aaae1c89e6a5bce11293d212760a78d6c438842d2bc702b0c31e9d8513dcb32324d25a74c479","ssdeep":"3072:3/z10YAJvzpIdDu4xnw3H1Y6Vwl0PPh4ez0:3SYAJvVIdDu4xnw31Y6Vwl6PhG","tlshash":"cc44199a7728681342c6719060bf030f333670695408456cb75afdee2ebcd9ab1a7f79","first_seen":"2026-04-20T10:52:57.799077Z","last_seen":"2026-04-20T10:52:57.799077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNGIj9uB.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DNGIj9uB.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/j8Z5QhrA.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-76db\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiTtzLO4VRNtyCRgPkJzIqKyzSAa6bBmDa1FcI20MzPBPEEQyD0JD%2F%2BxAzZh93oCEcqQwPD6wmTIuX85wIjHW%2FvMZzfYtsGd1VqAGEiUD2MyfkkhiCZpdBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998cc99b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30427,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30422)","md5":"ec95cf03fcfe285374a07df2fba47ac8","sha1":"5a1560a44ce32ea19e154318d7961a76dc432d30","sha256":"dab4ccb615599122b2119af3136b244351fc3e20d239822df10b4d43a8565cdd","sha512":"ba2d3f94d30f83e3e36df55ca14d79fec2e41aee4426fbde0467c80f490e6b0f6d1e9326c560754764e45d44918c495d1c47775d398eb9ac2f7aaed0b29e1694","ssdeep":"768:9qt4ygiMxSIxxnB+U9AfLYnye/EgMc+TAJdRhLF8ESigv:9M7y5LBETpv","tlshash":"0ad20804b106ed3a697361956800ad80ba284bdfd271fee3e2f9c97d27d4c7435772a8","first_seen":"2026-04-20T10:52:57.794336Z","last_seen":"2026-04-20T10:52:57.794336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/favicon.ico","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GXc9PvBMXzWvAoHq8YLpF5O9iUGCyWKtblay3H%2BlyhH1lLbQMOnAANHSKnYtyb7DbrlY8bNkIljbIKiORSSsfXBHN5dHXX7PJDa7f00Gsuhj81VFZm3MVM%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-325b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998ce9c35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12891,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"31704a1d596b6d7733c20b74b0e24b0d","sha1":"b752026a449c2b0fef2982c475ca98807de82a9b","sha256":"10f8d58daa1bd8f5d501c1a2be768792bc7092917c4b9333c7cd65a91da85e99","sha512":"fc173dacb7b3bb7f7d7761a4252799c442f5815b07ed1f124de69874be7f315d22521538eb2ba7dd1e4036107b0f1647339a6645207e4aa6da603a11b6e09c9c","ssdeep":"384:+dLKtpjo769w8Ueo2GYt6FsR/OG1LzPUcj:+FCpJiF4cGdccj","tlshash":"fc42cf2a683dc95b6cb7207c8d021fa7c6ab1aec62c59c50d1bca8bc928cc512173d5e","first_seen":"2025-06-29T01:44:34.874263Z","last_seen":"2026-04-20T10:52:57.800558Z","times_seen":21,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BXCTK3Av.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BXCTK3Av.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6%2BL7aEGeK3%2BOoBw59ZvBXXXZ938o8f1UMX%2Fzpwd5y2XKpHIYoChr8tfDIALtYxeS9f3%2BXZ5nyxU9jQelyE60rZH5RcPAdJiHzi%2FBYpiUOINw%2BKT%2BzkEs%2FA%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-986\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebba5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2438,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2421)","md5":"50d69fad59732b38fb4a226a617fbeaa","sha1":"a662bb31cec798f6fd3dc4eb7716cf3203752e19","sha256":"4c3245f44c8600f6d82658f0ccf72531e43d026c001884bf38879e1e0182219f","sha512":"040164ebcc6be44a55b0bef282361e8f1aaa2f25efa4f2b11e6eb92d9b279afc4256689f7698edccfafda30ba9af6b2fca353b27b3ed74f15a88b1a70acc7179","ssdeep":"","tlshash":"1f41535c6c38cbbc946748542136102072852aefeb6ba989c2f98e293da3db75d50311","first_seen":"2026-04-20T10:52:57.801284Z","last_seen":"2026-04-20T10:52:57.801284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T10:52:26.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: text/html\r\nage: 14\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoJDXM6XHhp1XksWN6V90BwtsZVbFR1cTzw%2BoVfwdzcWVItwrNGiAgNY8gfbGur46%2BSoZo%2BnYRJzHTshddzom3SUBDmTow9omtw4KMaJajS46O9%2Bvg%2Fxd8s%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ef3997c6ca9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":3038,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3038), with no line terminators","md5":"d029c9806247e3c3a032723f2b46d28e","sha1":"5079f0d121d6f253b91ac2d8c9ab70df6d01d988","sha256":"5057e9606b379ccb102c7bd50a923f1bfa616e05e7648790843d8efe1a4e4675","sha512":"48a819fae0dba388a1f422e2c3ac7190bf895188d660d593880552383b3eaeec76cf3191bdd156eefbab1ad93e4f42783839f6714a0bbfc99292b6e70f5e0a2c","ssdeep":"","tlshash":"d151d7ba3415a53e23ea08ddf0a5b10c753b10ad650d9800f1e5a17a3e117eb8e349cf","first_seen":"2026-04-20T10:52:57.802744Z","last_seen":"2026-04-20T10:52:57.802744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":62,"dns":43,"connect":1,"send":0,"wait":121,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNhPRPY8.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DNhPRPY8.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CxzOo3KN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDrsGeo%2BE6SHLmUajByyNQqHhmENmoTJZxRVHkvtDolIJddLrjazAavN64yn6moXrvYrhvyL7lAo29pBHxqw9Qfr9StvJuJZ1aDxGdAWVgzkJ9cRELzsntk%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1c66\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39981995b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7269)","md5":"47322b7e4ca6cbceec495f7ad94e111f","sha1":"741923c9238935c653d5d6bd847f923f3660bcf9","sha256":"6b4b4971632a9083287819a269949b6dd2167509774b6365f6aa150f20bf0826","sha512":"07e80f9c17e5616dc12237a21de5b68f555bf6a2df8dec5b7f5f777ced9d09470c02f83873aac5bb69fdb02112f6630b7a9db4e6200d16def6ac04ec71e2875a","ssdeep":"192:cSSoYXMU9wP/dG5xKccUKqGbP31J2BwY/dfKPvVoxKiYYSdKvcqK1lHKRdnTKccL:ltWM99vHUe","tlshash":"3de1a78c6c09edb8ac072450ede86e00f43d5b5ac9205859f4fb8b2596c59d8ff8f358","first_seen":"2026-04-20T10:52:57.80423Z","last_seen":"2026-04-20T10:52:57.80423Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DdETxMij.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DdETxMij.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26464\r\naccept-ranges: bytes\r\nage: 17\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-14e0a\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5jUBekzwj%2BUn7%2FB%2Bnjnwqddq45wrOsKkGndNP3eUNtZfX3Ib8%2BXUSEgysCdiesrT7W5ZugEP11XYiJmm%2BwutzerHyfnoz2CcfxnSg3Jtk5HRYvw%2B%2FkfONY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399834ba75684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f7464b8b55e89adcd899b952ae44b3a1","sha1":"c7458c23d1806a8cb2d8c527827ec7e577647073","sha256":"d6b5e005f8288d8fc06395076eecae957ed16505be78fd109bc7e233c0f143d4","sha512":"40eb75d04e34fbb49ea2d2c86c70e633d36822a89d3307a4a59543eb0808fe88efbe2fbacbd415d02cd5e8783c3b05ac1405b8ea9fac7a50af9728d46eed4eac","ssdeep":"768:4cIhON1T0m9KZ5sAMGNr4F5eQzCiSMcMHpGmFN2ih6haA+5ddB+PdnhPyWmt5601:4wwTcvvF560u2MCIVtU5HO0jF","tlshash":"2b831880b148a8757f774486d1b2d810f23aab58e111bcd2f0ef5e6e16da9a432df31d","first_seen":"2026-04-20T10:52:57.806681Z","last_seen":"2026-04-20T10:52:57.806681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jML9mI%2FfdmlTUj89qGGSUejS1q6IZ3N4KI7yDhh%2BvsVn8JzIdI8Fi8ilizKas%2BFRHUT1o3qcrlxMksrHU4qfURB8WqbcMAx84tF8GiinyhXNbzM4HWpxS0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39987b9f55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/vods.Cpmoesvo.css","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/vods.Cpmoesvo.css HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 11\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pESGZXOt7t5kbR1zHnYWnhk6jkrGkfhhaMuzRE4gKRwmVcofnOK9Dn371HCQQsXNz0AsQLFQ2bOwYGCXcZiHIAwWbkNn1qnl7lQfBGD%2Ftlfa524i8u%2FXhL4%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-150\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988bb7b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (335)","md5":"8051050d195601042cb8f94130e538b5","sha1":"380a78cd45f38cab4ef3309a1c2f08a7e366679a","sha256":"6385f7d60c3a2d22d41811173937691f2609af7d4de0e49c8e02b91bcb65ebbc","sha512":"3cc1edc14e19154b986074e85b02a2628b85ce372102cf4839f3cfb7ab2288430d537255237bcd8be773325c8bd6301d62ee49fbac207489bb3064eb4777ea01","ssdeep":"","tlshash":"9ee026f35482992f78dbf8ac522af21c4c0be98fd44d0b34b66c529da9ea0d082ad011","first_seen":"2026-03-05T02:29:35.116431Z","last_seen":"2026-04-20T10:52:57.810456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/AQtgKtpx.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/AQtgKtpx.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 25\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCQA1q0vT2SCOJR2b9sJgInlEONjIORu52RxzesGVIZVRzN1RYKjQOIkIm88KdyV5YCt45UtaUmVv5dABImF2S9gcZPw3K8Nd2yJxKcgA2NtBVzrhwV2%2F%2BU%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-ea7\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988bb885684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3751,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3750)","md5":"60ba502a9cef8b4b1bafdcb7f0cd2e65","sha1":"ffb29c4d467235cd03f2df69377977e9770dcd30","sha256":"b974cc7be3bf485f8f2b99a82547194b6f438ce8b86c8591656f5f2868cd0810","sha512":"a77668de49303f6d56f5ec99ca614440a772db15f77a5587f02d5a5fd49d30a17e282f55ee55e3a38e7f78ae4ea22d6eda1e9d5d85cfbe422a15c6a2364ff59d","ssdeep":"","tlshash":"c77196c89d4c9db2d95b18d84874e830b27a8744c531a081e1feaa7c9345dc9bf0b3ac","first_seen":"2026-04-20T10:52:57.797771Z","last_seen":"2026-04-20T10:52:57.797771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CT3IsyzA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CT3IsyzA.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BXCTK3Av.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PthZD3UADKh%2F%2FZJRbaks%2BJydHdRY6YzkHfL6wMTuxhPkHB9OQ82kIXcyJvFlq44J%2Fd353r%2BJHRRVsfxVYWuGe%2BJbqxBppQ%2FNg%2Fq0aXXcwEAnhz6wfKqHrG8%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-5d\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998aae395684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"ede88729acd85750a1cb2f0c74c60b84","sha1":"005bf1abc3556974915b172271816706369a447b","sha256":"b3fe68357a6050cbb8749315b62a9cb121f1cf697bcb36cafa150a60a1e5c7d1","sha512":"f710b42642e26a35d896b84c27118e607dc0b5996e9f084556a0ac8c353e018c766de08d74f3fc2edb46ceb2959c3c2d2d992b959e0abd50ebc1d293f02cef92","ssdeep":"","tlshash":"dcb012c3a141615601c2248cc5126419977752b6624c1530944989a0732637c9217885","first_seen":"2026-04-20T10:52:57.789155Z","last_seen":"2026-04-20T10:52:57.789155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/entry.DEzmYzyd.css","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/entry.DEzmYzyd.css HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 36732\r\naccept-ranges: bytes\r\nage: 40\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-34829\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZaJkNFRBlA48bQLM5NbY4zqAKfKO3TmAvfx8jCY5WKRKebNBIXn706vzEuM8VEfPNWFUsLlt5ahB4E7qLN3eOxlOE7nYHeXC1BPssBQBjLmQgIDPyNLX04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3997e5d215684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"46107a120aa58027231ded7f215de7ee","sha1":"c83a3df40706858c3c1eef440b43e07cf558d1d5","sha256":"8c94a7c303d82fffe967cb13ae352419338b9e3aeb4de4d3acd103598a7888ba","sha512":"bc019af6b509f4db95c8eca5dba0ecf8b31e5acfddf6acb46d774d0f0cb4127595d11d1e1d7226f1b2f460c58d8a2bb42fad5aa3303cbcf6fbba0ce2ebf09347","ssdeep":"3072:OpbmQZ267YcEwqDrN+D9DmqNLg/mzJTBkxj2Xfu+:IbmQZ267YcEwqDMNLgmzJTBkxjcb","tlshash":"dc24a484b261ea3f7c27a0fe538ce45ca208b0e1dd158bedf535a4091ad3bf6396b514","first_seen":"2026-04-20T10:52:57.812662Z","last_seen":"2026-04-20T10:52:57.812662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CTj3ke3Q.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CTj3ke3Q.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkolgVqTsojpm8x%2FJGoJKILM5l5PCtzcEEfAZqwOYnU391v3fkxYXeZybGAJR2iZrdsza0ZWm5A299UXFAzy8MKV4Yfl2j1HTokFdBQLkqR2avlx79bf8Sg%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-3b0\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399834ba45684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":944,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (943)","md5":"d799f8c91f612d6eb487046c55810417","sha1":"a28d7b6d049d23eb4fccf65b2dd0955629ac8acb","sha256":"1830d6dc4601123f4c39d8311ef091d97df08158606c9d6614737ab34401f5a0","sha512":"4464e63a3db6642f88f0b61af5cc29dceb269b09d06255e969507651975c4b85708095016516748df3265c7ae5cfb1da2d1312e07f7dd5884e79156b31ee08b7","ssdeep":"","tlshash":"7211105da6cad0fa3703e19db4a22451968d84ed27f12693e0eb085c26613a4c54bf16","first_seen":"2026-04-20T10:52:57.758393Z","last_seen":"2026-04-20T10:52:57.758393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bakv33iK.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/Bakv33iK.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CTj3ke3Q.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11943\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-8b07\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnwOHRDNisC%2F37adb34Z22xCr%2BVqsdvmMzj5H6GKVh9JKw%2Ft3kj3jA9lBOvzyKyLGslULCBJG0LFeqhXHo5bzSJF3voT7SiruX4Ri1Yd%2BalxgltnPvmfGE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399844d255684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34187)","md5":"805434a7cddc6c7feeaf901e1da8bedc","sha1":"7d7367ba2340abc14cadbabb617cc35b8ff2e67c","sha256":"e2892d9c2d4b3d31a0a361fb7599241b56dee0daa2dfa120cce572deec980634","sha512":"60a58ea3e9c89fe52c858b40f357d474333efb0f9167d6065639ff538dec068e21d232357dcd7ac8ed1c4129fc2e8419b32b52bac752365b2facd7bdc48942df","ssdeep":"768:d7HWFbWQsmMHBxOcpifkU9YqqzcOefCwjtkzlmiNlzaTtTuAfGTpkXlKkX:dzjnUlqzcxCKSxNUuAfpX","tlshash":"0ef23bc0744caebe2d6304c690b7a420513e970dca6568c0f5fb5e785be6da0b65fb2c","first_seen":"2026-04-20T10:52:57.773504Z","last_seen":"2026-04-20T10:52:57.773504Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/assets/thumb/ac51c1bb0875c156b78415a833175ecc-thumbnail.jpg","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/thumb/ac51c1bb0875c156b78415a833175ecc-thumbnail.jpg HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14849\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Apr 2026 05:01:03 GMT\r\netag: \"69e5b30f-3a01\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2VO5pzDSP2JH5Hk3xjcu3HcscgPML%2BtvXgZaQ%2Bl38kJBTA3UQLtOuhYLR9dpqQMl2ARc%2F4r4h0Jb12laPUk7FXILdKvqgjs6JkM4RHOw%2B8cEy2BhAMBWOWTsEge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a3d995684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14849,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 300x168, components 3","md5":"64c29445e229c73398c073e0b64219de","sha1":"a0b8601173f13fff5e2209e2487dc778857c0ae2","sha256":"99a6d576b386bb510d564672235c608cabfbc6633afb6f9d5c4d2eeff5657502","sha512":"0307e25b14514139892a7583644d592c64e26ec40f1b1236e45b65da25b6acab60c7bcc6a1a636cb4dc126abddb4b76187825c971cce205973893b0c35fd578a","ssdeep":"384:RPglRQDrli1jb5ITsI8+OF2VIe2QdJ267X:RmP1jtIN8+OcahGU6j","tlshash":"d5627c3fe813bd0621f5d2dc1f7090badb402f6255725d0e46e9cb187295dc206cee98","first_seen":"2026-04-20T10:52:57.814391Z","last_seen":"2026-04-20T10:52:57.814391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/nRU2woX_.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/nRU2woX_.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GciYAJZDfz42cQHLYfS%2F3zuNrOg%2BQVdBigi5Cjn4xUMPAAX1Gs5KrAnd6xRsSdHQHOh4Rnv5eE8AJJJU5Xxvim8HjQHddvsCI%2Fo8Kv6Jl7cluK5tqk2ELlI%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-25d6\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998b2ede5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9686,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9685)","md5":"053794b9bafed3f699f125a1757b7eeb","sha1":"01f4c99027c26979a78d2f4fba61df308d33cec8","sha256":"f404891e2c63a9dc4bcb1d5f4a5b5bc9d8a84012393c54820a1336d68c70ec27","sha512":"7017e4592ff01c1b3e3be90cda34385549ce6ab27982f1d244266b1344f87de13f7da426a5dbd49a7805a74b3d2ee44d55d0b5627993ea310babd6c050ada9eb","ssdeep":"192:6voXP14RYDy2+l4QoDSoi0VJ7K6o6pmNOTUlBlWLZG0k46Pl8a7pv4TwImR4Jed4:6v5Y1+l4BSEJe6poN4UlBl+1HaJ4TwlK","tlshash":"62120ae57bf1f231079e15f8927742013128196c304ec4f2f0ea6dba34aa5c5c86af1e","first_seen":"2026-04-20T10:52:57.785056Z","last_seen":"2026-04-20T10:52:57.785056Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CnfCPFi6.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CnfCPFi6.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/j8Z5QhrA.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuACV%2BnMqWNrm%2F7n1invSCWgHIgCM1eT%2ByRT716djBbuwMcN5wCwtoyA6%2B0PehxV99NEnwgPIABs%2Bo3PF7K6uBZb2TEOmnrVblOvaUI3Uta%2FV3aVMxbE3mg%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-36e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998cc99a5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (877)","md5":"03a6325758ae4c14555f03138c9f0762","sha1":"5051c5d1917aa2edcb6dd4349b2754852a6107ef","sha256":"bff54a836bbfb9444f87ea80da2d69716ddfca80b093ce2cbaace408426a1ed3","sha512":"ed0efda36ee3f782124984cbfe6d7323c6c91a01a2a2e68637c2af2f5bac0a0ef68ef5d11cdb3bba69aa24afc45e14cd5ed31d4b63f48c4b227faa0e333a5045","ssdeep":"","tlshash":"f311abcc688c6578bd072d47d235a534b03a95899a32bdb1f1a1aabe6580a20b20f364","first_seen":"2026-04-20T10:52:57.816506Z","last_seen":"2026-04-20T10:52:57.816506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CxzOo3KN.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CxzOo3KN.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss6irdy9wFmTvyllydWEQwT7WZ92bFPitMG68cXNRW%2FkM14XG%2BIgnbejfO6Z08e3oZuP6Jj%2BwjA0tFOihtN4qpqnx41LWvB9y%2B%2FqGERE4qHVuXnV7gGV7io%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-1d14\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399805fb75684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7444,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7326)","md5":"24400a20fbe3e4c8aee6df5d0c5e7555","sha1":"8680e47fe6749d5e426808bd8b7882ab998520b1","sha256":"5f1a7db84e88158c1726d1911e6bb5fec0dcd49a46e003f834996c788edc151b","sha512":"2ec65313ffb9424578cd50fa5a65fc1263f5d36544e45dcb8e01ee4f668791efa9652f388a392281a97dfcd4158c006e2d7a5cb842a277bc5f8975796b66abf3","ssdeep":"192:YCvc1ktNvTyPU1T541hrWOadDqiEBwu6NuYFwszwQ+4pNmovSSm:YCUUTysNS1hKOadOiawu6NuYKRuNmo6H","tlshash":"58e1854db57a6ebcf4ab891484686506a68c2f9fc1529585e3bdc92d33c0d382ed837c","first_seen":"2026-04-20T10:52:57.818373Z","last_seen":"2026-04-20T10:52:57.818373Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/lOG5DMGY.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/lOG5DMGY.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-4100\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYzbsTuguLfkt0VEDjSEgWrN87c5KnZHjUNj4uduM7yGeZJHQDOBfkN0SKQwXUvFkJpvsClqOe6kl0KJTjV8sfavb7bh7G9qLg1od1YMR7EzS5B8%2Bnyr12k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399805fc75684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16635)","md5":"ccc0b28751d6513f305248ffeb5791e4","sha1":"6093d38e265f512a72ffdeea7dc33a58b2293be6","sha256":"4897e21d071cab4a60b7e9b05d9b92063b8a7e414401005d6e6fc6cd07dca3d0","sha512":"3577d4470c642c0b09f7e5350c6809bacb5fa86ecca23a4b148347c3884c908acf4a6242e59814a2c34b593dd781413fd404f1ed5ecc0c6f2ac718b5038b320a","ssdeep":"384:EWH+ZTbXUH3j//bEPhXgA51/CBhdAAf9IK5qM:EmUXUH3j//YpXgAP6djf9f","tlshash":"e172a69bb33a4e8b743e7bd7cd968f4dc9ca555321c0f178dbeeb68169a00568270c90","first_seen":"2026-04-20T10:52:57.795824Z","last_seen":"2026-04-20T10:52:57.795824Z","times_seen":1,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/carbon.json?icons=api-1","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 03:17:08 GMT","end":"Wed, 24 Jun 2026 04:17:04 GMT"},"fingerprint":{"sha1":"C7:61:00:F2:D5:FE:2C:00:75:61:A6:53:17:66:5C:87:6C:DA:E0:F3","sha256":"5F:1A:78:B0:83:6C:E7:52:BD:B4:74:DE:50:8A:44:F2:0A:90:8A:03:24:08:4A:D4:F7:C5:AE:59:EE:6A:A1:8B"}}},"request":{"raw":"GET /carbon.json?icons=api-1 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXw5%2FFAV3JoBLjdmwNLwg%2Fq%2FlEjkodjsrNIG3RiN%2FCVp%2FrR7JFIOI0n%2FaSBUQytsJ6HS04ceNQ2LeDY%2FI6JR9Iv1HhJdl8ilAgk5zVFPREBhI9bPGBUubpR7gb9QjL3mztv5KA%3D%3D\"}]}\r\nlast-modified: Mon, 20 Apr 2026 10:52:28 GMT\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef39988899d56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3dce39306962bf9545048392262c902a","sha1":"b3cbfd73297c0e31aedad0c56170a22bc9188aec","sha256":"c0e4173c92e7de5781c187b4e0c651d493315325730569ed75c5b9c3480b20df","sha512":"f51d8133b27e91ac39f2bcb4f95b96c6184d1cdd2025234a9e1aba040532c1683447fac91a993c0598029792b00ffa08abb0b3377b87f34ccb76118250940738","ssdeep":"","tlshash":"a8e08c68af2ea6dd8501c81a1b5cd66a0baeb2a1314909b4026c62a836a230ce497564","first_seen":"2026-04-20T10:52:57.820348Z","last_seen":"2026-04-20T10:52:57.820348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":63,"dns":21,"connect":3,"send":0,"wait":37,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CaPMEfcl.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CaPMEfcl.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 78204\r\naccept-ranges: bytes\r\nage: 39\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-44009\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYqUXVUxl3BIqtaFQo3IqIs%2F5rSOv2LT0v5gcz%2BwmCcXz1n9I2KNUnEp4yXb6CWL15HdvG1jmX8YCHd3tb38eid0E1CQMiV%2BGxNmNuOHid5epIXDISA1%2F%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39988bb7e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bc7cea95879fe3d6e8ee6308e3f1b276","sha1":"075b61285fcc765f5f20bd56169bee5b8e1ce7a3","sha256":"4713b6e4c83fd9cb6e3f14eb601202384a82e357ea6627d6c6f629ad68ac171c","sha512":"43fab96168ceff1bf41ee46008cbba9acbb07587d27d3dac7841aaae1c89e6a5bce11293d212760a78d6c438842d2bc702b0c31e9d8513dcb32324d25a74c479","ssdeep":"3072:3/z10YAJvzpIdDu4xnw3H1Y6Vwl0PPh4ez0:3SYAJvVIdDu4xnw31Y6Vwl6PhG","tlshash":"cc44199a7728681342c6719060bf030f333670695408456cb75afdee2ebcd9ab1a7f79","first_seen":"2026-04-20T10:52:57.799077Z","last_seen":"2026-04-20T10:52:57.799077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BXCTK3Av.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BXCTK3Av.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09mv7zwKYn8irAbHbYpOsivt3gHerbNdFEL%2FZmj96wiT4PGirapWEVd1UpTD32kZo8R%2B6rTJTXnSyfzueuCM1dvix7rHxu7ole3%2FNu10H0IqOuh8NELfSoE%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-986\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebd45684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2438,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2421)","md5":"50d69fad59732b38fb4a226a617fbeaa","sha1":"a662bb31cec798f6fd3dc4eb7716cf3203752e19","sha256":"4c3245f44c8600f6d82658f0ccf72531e43d026c001884bf38879e1e0182219f","sha512":"040164ebcc6be44a55b0bef282361e8f1aaa2f25efa4f2b11e6eb92d9b279afc4256689f7698edccfafda30ba9af6b2fca353b27b3ed74f15a88b1a70acc7179","ssdeep":"","tlshash":"1f41535c6c38cbbc946748542136102072852aefeb6ba989c2f98e293da3db75d50311","first_seen":"2026-04-20T10:52:57.801284Z","last_seen":"2026-04-20T10:52:57.801284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/api/ping","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: Indians in a hamster wheel\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=900\r\ncdn-cache-control: max-age=900\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTtFYfknJFAi79o0B3cJIiUwSGEB7W2zK4tq2AufkT9Z4SmjDdvt%2FoaWJeauBsYpA2nwyrebKjQl62zDBUjcZfhb%2BILpo7gNijvlo%2Fr89W4P3ufIjTTztCdYBuOH\"}]}\r\ncf-ray: 9ef399870aec56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"58f328c06927d176bc641c234bd4901b","sha1":"7d68a765aaef12d15f0bddfd8c4525acd5ae8265","sha256":"09c833318a5c45610ebecceb4be4f2a869564d9e874b8d72ab0038eef2ff9d7b","sha512":"0d7ff8836ccae06c9f7d133ac4719547c034d5025e948d2c329d4e2378f2bcc724dede2c25414dd767a9969667fde799555b3cc1f73c6b4a949c9721966450cb","ssdeep":"","tlshash":"7a90028701bb2055f889112530243f71a5d4951f8814410af41f0015465011515d644e","first_seen":"2026-04-20T10:52:57.822118Z","last_seen":"2026-04-20T10:52:57.822118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":84,"dns":60,"connect":4,"send":0,"wait":117,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/api/ping","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: Indians in a hamster wheel\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\ncache-control: max-age=900\r\ncdn-cache-control: max-age=900\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ks5ds42Vw6qtHvlmHBIkEmW%2Bzd1%2BBB0iCA%2FCM%2B7RhIN6gql0Gna0rtKM4p4WBEkFtxK69rVco43Alz6IE7YvL0IhnBGzeoBJ83z2hpbuBfzIDz8og5wZTA0WY0js\"}]}\r\ncf-ray: 9ef399870ae556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"58f328c06927d176bc641c234bd4901b","sha1":"7d68a765aaef12d15f0bddfd8c4525acd5ae8265","sha256":"09c833318a5c45610ebecceb4be4f2a869564d9e874b8d72ab0038eef2ff9d7b","sha512":"0d7ff8836ccae06c9f7d133ac4719547c034d5025e948d2c329d4e2378f2bcc724dede2c25414dd767a9969667fde799555b3cc1f73c6b4a949c9721966450cb","ssdeep":"","tlshash":"7a90028701bb2055f889112530243f71a5d4951f8814410af41f0015465011515d644e","first_seen":"2026-04-20T10:52:57.822118Z","last_seen":"2026-04-20T10:52:57.822118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":80,"dns":59,"connect":1,"send":0,"wait":124,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/api/streams","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /api/streams HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\ncontent-type: application/json\r\nx-cid: 2966598915124c63ed7d9315347b102071da42ecc37a3052ec7231efd469de31\r\nx-cld: 60\r\nx-ctd: VVRD\r\nx-fs-client: PPV WebClient 7d744fd\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: Indians in a hamster wheel\r\ncache-control: max-age=10\r\ncdn-cache-control: max-age=10\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nx-redis: True\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5VaZbu6JdqKbh7ozJI8FnAE8qxO691RSf2kiykPqFP%2FSRCyGAEysrhKsE07cwzgKuAuoMq5uvhk8E678WlHj1DLzmARBbzREhyRW31HUhpiE6DFGmsi10OwOLCy\"}]}\r\ncf-ray: 9ef39987ebd456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ed49769287801874cea336f19dd34367","sha1":"c0830a8946a0d9e1b39cde1bbb4d81175d6a421b","sha256":"99b18db294791333c4476254cf353afece01e83a50d06ce1c170ea9edae67fb6","sha512":"e9aeabd27e7f00719a00c81617fdb4611c89acf875988d752adc212e832ad8234a926a54b85ee9e353640daca4fb3605e93e8423eaeb0ba1481b4b860542d14e","ssdeep":"384:2G67eUYywWfIV8DAZZ9AnApyrlQlKjduStrh79iSvdIUF8jfW0QW8A3QlR4cMSuG:FXJK7V/TtDNugHFrVDRoDG8I","tlshash":"f143f1ff07fb497eae4955c05a8b1e4e1ac525031ec42ca297fded580580bec798b239","first_seen":"2026-04-20T10:52:57.824099Z","last_seen":"2026-04-20T10:52:57.824099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CHgA9FoW.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CHgA9FoW.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVGlVr1t635uqo%2BZmoVbT6wKUlzdKL50FGuZQtB2XOh%2B1T9xY5ccirvrdZ35gQbVg0hvin8r%2Fc7p38lAy2oDRbUSgJjMDNe95wC%2ByvCKRxRT95ydoZ2wGLw%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1037\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998a2d835684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4150)","md5":"4c460259474494ee470e8763050770a1","sha1":"d779bad1f5fea864e3b6b122617bfbb77270dc9e","sha256":"752ec7f66b6d8b266396d65dd0d917e138359b921e580c5fa9be6b8bc99aaa02","sha512":"f4eb1bb47204014b19418b86310d31e24de08eb996ef5ca2161061bba795e9f533d742ea3b1b2724aec24193bb51e779793861df2bdfef70d9babacfaf1ec871","ssdeep":"96:F7R0w1okNqTxwz8TeY71M57AjxAQwR2EpUYU9qZXcBt9:h/SkgVwz2eY7y3R2KUYUgZML9","tlshash":"5d810acc308a6979b7a744cc40946251a49cafebd4756e53b0fe8d5533418b0e8bfb34","first_seen":"2026-04-20T10:52:57.752216Z","last_seen":"2026-04-20T10:52:57.752216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/_...DiwQnIOR.css","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/_...DiwQnIOR.css HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 40\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B1yN0G6koc6MH2l50vkclY1BzZ5%2FU9lIJUZg19Y091%2FZN3XJA6o0w8mWwy7XDxgHAbyV1ud2gVNNV5RRkB294Ici9p9WojVz208XE0R369sRSS9TzZLi5i0%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-5c\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998bdfef5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8c808b8e2afda9f236828372c8dc446d","sha1":"400e73c4656ae0fc1c73bf34a316bd68bbc17a57","sha256":"a5959679fc2baa54a58742f6e1b152c946e0c17711581cfef06c8616d9218917","sha512":"6a3ee6e9d49ddd99b7b9d4ae39793b441c8d68c8f9750dd0f2ec1e7035071b7c4c454151124e080b3a1863c2631aaf41b72eaf58ca685584662c48bdcc1e0c9e","ssdeep":"","tlshash":"1ab0125a1128006ce4bb410d206858240644d59a5a092afc8b41879820410553a608d5","first_seen":"2026-03-05T02:29:35.134186Z","last_seen":"2026-04-20T10:52:57.827204Z","times_seen":3,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DNhPRPY8.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DNhPRPY8.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1W8nmIx0KFN%2Byp4lQmn%2FHVixFnmfV65YZzY%2FT7eV11zsN7Z5EwlW5QcgKnvP2ZaPrXoA%2B2R0ifmVQhIPU3MFuQt0gn9kdGiaTbcMXoEJb3xer8asCGB94o%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-1c66\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399805fc25684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7269)","md5":"47322b7e4ca6cbceec495f7ad94e111f","sha1":"741923c9238935c653d5d6bd847f923f3660bcf9","sha256":"6b4b4971632a9083287819a269949b6dd2167509774b6365f6aa150f20bf0826","sha512":"07e80f9c17e5616dc12237a21de5b68f555bf6a2df8dec5b7f5f777ced9d09470c02f83873aac5bb69fdb02112f6630b7a9db4e6200d16def6ac04ec71e2875a","ssdeep":"192:cSSoYXMU9wP/dG5xKccUKqGbP31J2BwY/dfKPvVoxKiYYSdKvcqK1lHKRdnTKccL:ltWM99vHUe","tlshash":"3de1a78c6c09edb8ac072450ede86e00f43d5b5ac9205859f4fb8b2596c59d8ff8f358","first_seen":"2026-04-20T10:52:57.80423Z","last_seen":"2026-04-20T10:52:57.80423Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/C2ez0BML.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/C2ez0BML.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JX%2FNEuxSwoQgh3Ls8aUotr2d0o64%2FIDaYoiOGcMyidTcvzmPOrou9%2FpkMCcGBMxZ%2BlyzLkKxVd6MWIfl9QnTd6kzq2DDXbEhCQf8H63p5HQR7EtzzlFHZKg%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69da1299-1c7b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399805fca5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7290)","md5":"91c0e40dea17ff183003d9140389859b","sha1":"81d997df809ce9e0cc6f5aa0f3818cb1fa78b367","sha256":"4a6fae422ad4f6f3212debbf586c4da7de7f17525c18e1373d2d4911be61ed76","sha512":"921791efd6a41b36d4766466c003673c452d177932f688cd8d680c0a0522e1efa4f6f3441b5558481d112fe397949602b1e870bdf02089e2e8a16e97447d99ef","ssdeep":"192:dX70bGLfVw0d7cqjcLZdo8Vj3hz56rwy6E7yRz2r/p7DjnP1R1GP:VoaLf20d7TjcLTVlNiSE7yNIpDjntHo","tlshash":"cce16574b251637913f53cf0a1368e9ba2633a743cd4d1d36a0ec9773512846bae3a39","first_seen":"2026-04-20T10:52:57.790644Z","last_seen":"2026-04-20T10:52:57.790644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/Bw3RRejE.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/Bw3RRejE.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CxzOo3KN.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0g9JVGbfjhKQIL6dOXUY8A2vtmTDLEPSlsd8JRKVHpXc2fAUf051t3ygRN1cNJzArjdN7BtYzNG5NyZe10eo20P8rDLMCmrL7tUOxFjwSU%2BnT5PTNeqo0ts%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-955\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39981995d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2378)","md5":"f7bb9677f3bec750eeb66facd141ce55","sha1":"dda24ba14497117482076b5818da07c77cfe2566","sha256":"5afeff085180943a03b9790f24a9d3ad8c1a08c63640a21b423951732ae76ce4","sha512":"c05c713183fcfa5824c53613a18684fd0e62115073b180fb9926b2af0cc3b67c4b12ed841644870c36b30ca90510f9b6747a71d57513b3854eb3a50bf74ef71b","ssdeep":"","tlshash":"6441454cf805c6f8f697c089c029ac20f98a2edbd5667656f1fe560ad0c586b2ec0318","first_seen":"2026-04-20T10:52:57.786472Z","last_seen":"2026-04-20T10:52:57.786472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumbai.poocloud.in/api/event","fqdn":"mumbai.poocloud.in","domain":"poocloud.in","tld":"in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poocloud.in","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 04:41:15 GMT","end":"Wed, 17 Jun 2026 05:24:26 GMT"},"fingerprint":{"sha1":"0F:11:11:1F:50:70:48:4D:D5:FE:D4:86:D0:4B:57:E3:30:02:3A:D7","sha256":"BB:C0:72:1E:1C:D0:1F:21:24:6A:B4:54:93:33:B4:30:C0:3D:D3:BF:0A:46:9B:9A:53:6F:A7:1F:60:ED:AE:C3"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: mumbai.poocloud.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nContent-Type: text/plain\r\nContent-Length: 73\r\nOrigin: https://ppv.cx\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":73,"data":"{\"n\":\"pageview\",\"u\":\"https://ppv.cx/\",\"d\":\"ppv.cx\",\"r\":\"\",\"w\":1280,\"h\":0}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nserver: cloudflare\r\nx-plausible-dropped: 1\r\nx-request-id: GKgLLqTY-PSDKtzvVjqB\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QchadWQsd6RlHV%2F%2BRTCQiabrpm7UqCaAUNl71qUgv%2F%2BY37ZH%2FgUR7ju3vnD5ni%2BqA1F3JeF3SFbozYVFtD6qVTE6IPEo6h4w42aTNmA1LptHdmKlb4F1NvvOBKbcTIYAM5pp6tk%3D\"}]}\r\ncf-ray: 9ef3998278ca0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-13T09:41:54.591789Z","times_seen":425229,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":87,"dns":65,"connect":1,"send":0,"wait":62,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DCbhEQXb.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DCbhEQXb.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ju%2Bk%2B8n0Fn5jmkMBzCLqM3HrlIsOV9Ln9zvHhR2rBbc2IUh6B6D6M2HGZ2BCVOcIIwtx4aKzXZLP%2Fa%2BJMXzUJ3GlBEefnVLNPfV44357euqkr5axeO%2BxOc%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-6a1\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988ebbd5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1697,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1696)","md5":"dfb3390621f51562b5f2bd890728f2b2","sha1":"b8b445fa6e31b2dcfb538390257dbb000584aa1b","sha256":"4682fa4d39f5930723cef5937e73420d919e06ede1094a7a31f1e99b2f5ec344","sha512":"ad63bd755234999b3bd62555059387a339e62d27068661b0b924cbca6591d40d5b898af35aa82f89d9b85862e04d5a783c7bfed942fb31d117dbef26695176b4","ssdeep":"","tlshash":"be3186bab4e295383f1704df49e65115a73101bf1c6c9dc8b03a0d3199f59ab4759f43","first_seen":"2026-04-20T10:52:57.755433Z","last_seen":"2026-04-20T10:52:57.755433Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/assets/thumb/70978734e4bbc8e7a1ee87ad12e7d5e2-thumbnail.jpg","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/thumb/70978734e4bbc8e7a1ee87ad12e7d5e2-thumbnail.jpg HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11385\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Apr 2026 05:01:03 GMT\r\netag: \"69e5b30f-2c79\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kbQl6NROTr7HX%2FGCRAFdYaERjP73vIZXuUsOXZW1iQ365Uzj623VXSiVOleJz9wHTCYW5s%2BftjO%2BlL9UredPAaVMvVPjg3wBgcwTcXMHXwRgMPN%2Fvm5Ni2un3JM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a5dd55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11385,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 300x168, components 3","md5":"fca64624b598cdc3ed75baa91706b668","sha1":"d1ae4df4b762180dbe485e697be4706f49c540f4","sha256":"84f396841bbb2d8c1a46ab1cbd53cfc16da33125176d26df0c584262bf7daa29","sha512":"6c990487069ef657b1f7d926ef588c59fed342b630b412ce632416a1e80ba70b48ad8ed9487fbbf023b327183e668c5bb98ed7e375771131621cc8a46879ba8e","ssdeep":"192:R1Tz0Ww5l44ssbnhMCLxpKWwz6FMHqUChbslYi8888888888888888/:R1T4bO4sa/7BofqFli","tlshash":"eb326b7cbee3c84758dd8d52a76fc88ac718c41e32efd589a925932876243d42938193","first_seen":"2026-04-20T10:52:57.830592Z","last_seen":"2026-04-20T10:52:57.830592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/TwemojiParse.hUs9eMMv.css","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/TwemojiParse.hUs9eMMv.css HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 61\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6vgQiZeVWpGVI%2FUixrZSTg9nz9QESc85L%2Bm6E9lYXPrqenSBa93LTDyFo%2FJ%2BHs1D9m%2Bc2jK7%2B361KT4PG1R%2FfX%2FPr59J8RC8v%2BxLrjC%2Fn3WYOkqvbJc0sk%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-52\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399804f9d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4a2369f5fadaa359ca6c5e1ee86773f2","sha1":"4637abceae739294b7307f0dd9df7dfcb718be16","sha256":"2bbd503742368fc9bbea7491d7c85766f06940692a46fffd7b5978f397fec10a","sha512":"59a4ee90794d713c41bc4ceb007355c00fba3d0cb2dccba286a3e581d8d72a8f3687d96fe76aca8fb9fd8f5a19840a44994474e38234798099ec465cd9351d67","ssdeep":"","tlshash":"e0a0123127926d1b845800b20d968c80362021c0e296610106010e00713418c4720001","first_seen":"2025-11-22T15:16:03.715993Z","last_seen":"2026-04-20T10:52:57.832794Z","times_seen":10,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CxzOo3KN.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CxzOo3KN.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/D48aHa0e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z79ATXVIlO%2Bl5BDI1nidhVHSTh0mJsgIpixMbM1ahZ048BTsecwncVYR%2FMxenuqq3RXCim2zWAt3GYJTOJANXY4wB1Nf6CzHpf29c60IsFu8hp%2Fe9VZilQ0%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-1d14\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998108af5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7444,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7326)","md5":"24400a20fbe3e4c8aee6df5d0c5e7555","sha1":"8680e47fe6749d5e426808bd8b7882ab998520b1","sha256":"5f1a7db84e88158c1726d1911e6bb5fec0dcd49a46e003f834996c788edc151b","sha512":"2ec65313ffb9424578cd50fa5a65fc1263f5d36544e45dcb8e01ee4f668791efa9652f388a392281a97dfcd4158c006e2d7a5cb842a277bc5f8975796b66abf3","ssdeep":"192:YCvc1ktNvTyPU1T541hrWOadDqiEBwu6NuYFwszwQ+4pNmovSSm:YCUUTysNS1hKOadOiawu6NuYKRuNmo6H","tlshash":"58e1854db57a6ebcf4ab891484686506a68c2f9fc1529585e3bdc92d33c0d382ed837c","first_seen":"2026-04-20T10:52:57.818373Z","last_seen":"2026-04-20T10:52:57.818373Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/favicon.ico","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msPA4eDwHSDTRboZJCktqhIHp%2B9S8SExs%2Fw%2BBNN1RXbPr1JfHzA0nAEtgISy1vrJfJ6ftG9ShfAAyTBVtINH02NNNYOR6MaYrXrvYcYrlZRh6L%2BwUm6dljo%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-325b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39981d9a75684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12891,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"31704a1d596b6d7733c20b74b0e24b0d","sha1":"b752026a449c2b0fef2982c475ca98807de82a9b","sha256":"10f8d58daa1bd8f5d501c1a2be768792bc7092917c4b9333c7cd65a91da85e99","sha512":"fc173dacb7b3bb7f7d7761a4252799c442f5815b07ed1f124de69874be7f315d22521538eb2ba7dd1e4036107b0f1647339a6645207e4aa6da603a11b6e09c9c","ssdeep":"384:+dLKtpjo769w8Ueo2GYt6FsR/OG1LzPUcj:+FCpJiF4cGdccj","tlshash":"fc42cf2a683dc95b6cb7207c8d021fa7c6ab1aec62c59c50d1bca8bc928cc512173d5e","first_seen":"2025-06-29T01:44:34.874263Z","last_seen":"2026-04-20T10:52:57.800558Z","times_seen":21,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/assets/img/ppv_to.png","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/img/ppv_to.png HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 23040\r\naccept-ranges: bytes\r\nage: 0\r\netag: \"69da1299-5a00\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IGEoDa8D30%2FxekTfEO0JBewHsAO%2F3Qmt07VZqpeAhk3%2FoHij3JJLW%2FoMeUVpjehoI4zN6ajFoFD%2FN3PmbV3dw%2B5At0cUvwFrk%2FRhg%2F2cvnFrL1EZKQC07w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39984bdd85684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 377 x 140, 8-bit/color RGBA, non-interlaced","md5":"d67e490f3acd4265360ae7b4ddefea3c","sha1":"af99dd057aa923edb25d1d1cd76348a145f8d549","sha256":"8d6cc3c3724eac993c4cc59cb67144463ac06b5099f51b45513890e47638b1d9","sha512":"132ac8d4223866114225f7dbb3a35c7e3f7ba972130ff5266f39f02ddb5df0d96fe2809c7ee239c8ae42be514ce429f70c9c173b08c0740f2dd3c836aa8e48f4","ssdeep":"384:i8QqlCrHhk3SIyhmNc6fUULdYC16jyvOss9BI7Kt9RUilTfZl61pdpT7HOcNdc0h:uqlCrB6SIyANc6fZLdAbF90KGEBlYdpl","tlshash":"72a2d1dedf60369df42c3a0568b556495042385be162cc6ee9937e6f0f83a27df34640","first_seen":"2025-06-29T01:44:34.892285Z","last_seen":"2026-04-20T10:52:57.835296Z","times_seen":12,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CnfCPFi6.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CnfCPFi6.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 22\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYbPLg1R9%2F%2FU4LaQXTvIUZ7vKcEy5jzY%2FXMB7kxW5iRVKsyEPqhg%2FwFR1QGoodcM5rckMxlA7KQG3evmL%2FDbuC%2BcjcPoOC%2BwoDlCOp68X2e1OjDxGG4%2Bfq4%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-36e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998be8025684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (877)","md5":"03a6325758ae4c14555f03138c9f0762","sha1":"5051c5d1917aa2edcb6dd4349b2754852a6107ef","sha256":"bff54a836bbfb9444f87ea80da2d69716ddfca80b093ce2cbaace408426a1ed3","sha512":"ed0efda36ee3f782124984cbfe6d7323c6c91a01a2a2e68637c2af2f5bac0a0ef68ef5d11cdb3bba69aa24afc45e14cd5ed31d4b63f48c4b227faa0e333a5045","ssdeep":"","tlshash":"f311abcc688c6578bd072d47d235a534b03a95899a32bdb1f1a1aabe6580a20b20f364","first_seen":"2026-04-20T10:52:57.816506Z","last_seen":"2026-04-20T10:52:57.816506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CIyKFzqa.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CIyKFzqa.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRyj5KVSIg2xofp3Bo3OGEWgP9dvZvmdfFUCWxCIKv8c9imJ5PojnFyTwkKoBGtwtKk3P%2F8SKaHKN6Bb9mPY68Qtoi%2F3kzN8ediM18dT3VrPuW4p32DP1fA%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-147b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399834ba55684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2623)","md5":"ce6b322b3da2626194528aeac2399a70","sha1":"077b509bc2f8397b52872b29d8c4700f89b0dfc3","sha256":"d79802b8bbe6ea3debb61fd0da8c8b84d8ebdb534aec6c8abcf8bd316b7ae6ac","sha512":"18492d77405a950d70535717380ce047dba243b061ee108db8f3948a8bc9ae97bb79c36d9f9c620cccae54499b3d415cef466b6893bc5075a7012c261bc1fa17","ssdeep":"96:E2L3XiNBKkkRmGrFjPejEX9/16A9jaQ4WIIr3U+6H46wTwt:TL3XizKJR9rFzejEXRsCN4WIK3UpIwt","tlshash":"e9b19744f50dde7999a7008c20959d20f229df8ace30278af0ff82559bb5c19bf8275c","first_seen":"2026-04-20T10:52:57.836244Z","last_seen":"2026-04-20T10:52:57.836244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DdETxMij.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DdETxMij.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CTj3ke3Q.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26464\r\naccept-ranges: bytes\r\nage: 0\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-14e0a\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voEJLQGfsQ7Q2B6gJ%2FsufKmDYMp1TNPGWcUrryRzrum9B%2FIpoSw2UF7TdxfPwGkH1tbFo1mwnKgfOfz5S%2FuiE733Ernn%2BdN036AgT8g8TwnzSldd1Z7rp9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef399844d205684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85514,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f7464b8b55e89adcd899b952ae44b3a1","sha1":"c7458c23d1806a8cb2d8c527827ec7e577647073","sha256":"d6b5e005f8288d8fc06395076eecae957ed16505be78fd109bc7e233c0f143d4","sha512":"40eb75d04e34fbb49ea2d2c86c70e633d36822a89d3307a4a59543eb0808fe88efbe2fbacbd415d02cd5e8783c3b05ac1405b8ea9fac7a50af9728d46eed4eac","ssdeep":"768:4cIhON1T0m9KZ5sAMGNr4F5eQzCiSMcMHpGmFN2ih6haA+5ddB+PdnhPyWmt5601:4wwTcvvF560u2MCIVtU5HO0jF","tlshash":"2b831880b148a8757f774486d1b2d810f23aab58e111bcd2f0ef5e6e16da9a432df31d","first_seen":"2026-04-20T10:52:57.806681Z","last_seen":"2026-04-20T10:52:57.806681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/jdecked/twemoji@16.0.1/assets/svg/1f1ee-1f1f1.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/jdecked/twemoji@16.0.1/assets/svg/1f1ee-1f1f1.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 16.0.1\r\nx-jsd-version-type: version\r\netag: W/\"4a2-IhCQXLaMMgYKdgFilhFLY9oLNmI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 644955\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\nx-served-by: cache-fra-eddf8230178-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fdf6f04696efea8e293bcff42a36dc9","sha1":"2210905cb68c32060a76016296114b63da0b3662","sha256":"5b44da97607108fd31f0828b84ab10f78ee705f30340185d46b866cc20bb48e9","sha512":"dfabc4bbd4104119a3c17a15f2decdefdac37c0dfc46e9cde44cb9e4ca59ebc8583764c8b7b38da6d5d5908c63c2cbd7fc396631c107d096261201c1c069f880","ssdeep":"","tlshash":"0f211ec55335a3905780cbd05ecbaad6009aa1ba810fe9635ba6901ca0ffdec9d23b00","first_seen":"2023-07-01T20:14:33Z","last_seen":"2026-06-12T16:08:13.295728Z","times_seen":464,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":72,"dns":1,"connect":28,"send":0,"wait":27,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/j8Z5QhrA.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/j8Z5QhrA.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: W/\"69da1299-5a7c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 0\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQ14Ol7ZwuvF%2Ffcffhq%2FcHgolcW5ZdbMRoX82Ukopbk6KD9Y1uWs6hAfb6yZcT%2F5NXsyGDOFF9n2knb4tLz43IFou7xCQ5tXCettjm%2B08IBGR%2Bv%2Bx7hXaH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998befff5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23163)","md5":"6a5bcc8f0b71efc45bddd2985747ab8f","sha1":"947014194cb14d3320e9814338e9b4207ccf4d96","sha256":"c98310acfbba8ae915c36e645efdbbabcdfec1bbc55efda07d8b540378724543","sha512":"0063535714d50cf7a3cfc1e7d87c065c2c3a693b3bcae848b96674189b19154a0c62d6a492fe42dcaf660b79a898139bfd9e6537ec981c3d09c7ffa057723959","ssdeep":"384:lP1gZ28fANy72FpAekjcLSfcQa2Zr4FxCKTw+DQQ2zzwiHmcT+/T36C/LNd9P:lP1gZ28faqmKekjJE254Fx5TvQ9zzbHI","tlshash":"3ca2f72ab421d8bef673109879fa410571580fbfc04089d2f0fd8e1127a5e76e9af369","first_seen":"2026-04-20T10:52:57.766636Z","last_seen":"2026-04-20T10:52:57.766636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/jdecked/twemoji@16.0.1/assets/svg/2665.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/jdecked/twemoji@16.0.1/assets/svg/2665.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 16.0.1\r\nx-jsd-version-type: version\r\netag: W/\"e5-0yJN9Zb1syzgjkp+mKLNfoWZcEY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 638216\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\nx-served-by: cache-fra-etou8220145-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 155\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1afd3c799f3e158662a70498e83e2a87","sha1":"d3224df596f5b32ce08e4a7e98a2cd7e85997046","sha256":"8eb4ff7eba0f3ba1c7c85170e9cc4abe739f0f7c1b0f202ffe705cd8ac807e06","sha512":"74a412d5ccaddabe642a9c8febfa5efd5a3253518ddb42efc7166c271c187dfd9e06006878aecbe65875d24d2c82a99035c29c5c0069e68e0fa4bdc195d0652b","ssdeep":"","tlshash":"aed0a795cb74244861544bf36b285ccd265236c4478cd994e9ad0962a58d59e2217446","first_seen":"2023-05-17T12:47:48Z","last_seen":"2026-05-12T15:17:47.30419Z","times_seen":16,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":73,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvnVfNbrH9Z2qXarEsZ9YnW1T7aDEel28LcSSFZ7Oo8e58z4F9c1xqb%2FQtbEGL%2FM8%2FgCZRmD2jjzO1%2B%2BUrBymEAeLP8gfdexciuzktsQdbe6oKfDG0mnq%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39987b9fd5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BYmHHTet.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BYmHHTet.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/BjO3HPfu.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eon8QHzoA8VyrS0bqCgcPjmknLGrdCim%2FbwbAbUiFhieXBt%2BFNOpEwByF%2Bq5Glzeutd1dyeR2Vnax70XA2uPE7a4vce5wDCG0hb97t1T1CKDw4Bo8xYdgZg%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-198e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef3998a3d8d5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6541)","md5":"50d56f0626ce079f318c9f092854b226","sha1":"d43cf59462977d0caacbb56542f00aa79ad0dbad","sha256":"3239eb29c223418c680e94e3239e8bbf4a4db15136458bf7b30a4df6fb4ab781","sha512":"c2064ac1d64704218632b107fd8641509bfb54601e2be56d2ebf68d34c04f40c3c0f3dde78789a207f529b70e179e6230fc0f08fc2eed91276dd2aa34533d8a5","ssdeep":"192:TumZgoDE33xLrjIFn2Slh6Sxm9ThRFW/a+U/N:PaoDW3xXctZlLxq7+U1","tlshash":"a5d1c7cc35d720a5bf7554e050e6f114b12aeb88701590d0f22dfd6928ab98cfa6db3e","first_seen":"2026-04-20T10:52:57.83982Z","last_seen":"2026-04-20T10:52:57.83982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ppv.cx/assets/thumb/31dccd43f26f0559d7e06fcdfa935d24-thumbnail.jpg","fqdn":"api.ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /assets/thumb/31dccd43f26f0559d7e06fcdfa935d24-thumbnail.jpg HTTP/1.1\r\nHost: api.ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13459\r\nserver: cloudflare\r\nlast-modified: Mon, 20 Apr 2026 05:01:02 GMT\r\netag: \"69e5b30e-3493\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNDIkj%2FJI8Gam9pSkktyX%2B4XViRCBEroZyiCEZpAxxe2QEeMEFTJvMLUpCR1hcbBwItQ1WmfRpQi2ICL%2BQZ9%2FxQmscEnZKcZFpSZhoDndx%2BoBp%2Fz3qwmP260m3yU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998a6dee5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 94\", baseline, precision 8, 300x168, components 3","md5":"5700c0ee3f5e8bb8692700e4ca028b81","sha1":"90f551b49c32c7fe139e44188c8273ff6ff46b7c","sha256":"e871ce9ad1e0d2d47740193e25302084e65e15375729e28b537ec32930de5219","sha512":"9f05ab9ac574aa0f73e5d4ebe677a7d7af3a77cff8442047001aa3b42a4c785dd809c9073889c03d95e3532b85f21e743eb9634433d7d34d5946cab56cd59a6d","ssdeep":"384:RcbuBntLLa/IpTJZl/CR+JBI3pvKwfffLyVy3:RLnQIpVZFCR+0YAyVy3","tlshash":"cd529db364192e9094f1fcafb8ebf042870374d569a7ce9645e5d83c6b61d7d0c80499","first_seen":"2026-04-20T10:52:57.84172Z","last_seen":"2026-04-20T10:52:57.84172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"api.ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:29.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gv02ktGoZEouLRCB5thMY8OsQVDxhAsct6lwKr4WWXq1geAR7Il8ZeY0%2B6RS2oYMbCVrrlkH3oA63kNIh%2FmwWIGhGS2fvQctdPn%2BHiHSRW4b1%2BivQ2EDIjQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef3998b3eee5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/DTAcx3Q0.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:27.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/DTAcx3Q0.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:27 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUAf3PWMVet8aSRQkAtcNsKbiFXA54gGwpKepZBB1kZtQZjVf4eFZqfvDjunHQsLxgFVQGjDsYbA7OHXZjrlIXCEmnKyS%2FvOR8sftjwSQ%2BW86%2Brz9d34Akk%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69da1299-1936\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399805fbf5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6454,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6453)","md5":"7bb96c6986f1c79d3f097469b1e85ddf","sha1":"b15d46e9a2a47fc24c6a2a2a442f9d78744b2104","sha256":"597447e3c84275a32e270934bc9deb6baf46c8f458f8a70d7c0101e0452e26d5","sha512":"f40e1c44a8c41a84bfe392d744650158507871af33e6b0bae43b9aeee22cab258cf230dca75a08c56f9f2bcc4c40c82e2ac195c627cab26a56b6c3da83c2e870","ssdeep":"192:hFjX7wFrspc9eogRb4k6UB6LhY9/rX5roUdRdcsjysq:hFT7c9eogRbB3BK","tlshash":"12d15148d514ee3a18937099c8e5b450f06daa54c735a7a8e0fdc61d5f20a41f97b39c","first_seen":"2026-04-20T10:52:57.772155Z","last_seen":"2026-04-20T10:52:57.772155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/CIyKFzqa.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/CIyKFzqa.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/CTj3ke3Q.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0v4jyfowuz3%2B9mOuzNfznFWSv7KEghR42TGW%2Bkf3xo29rrUwHvC3Gz%2Fobf7Aimox%2BMzZcgvIszepsUyiLn9PLOy7cQftcPqPmS8bhaLUvk7hAfE1%2B3bmS4%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69da1299-147b\"\r\ncontent-encoding: br\r\ncf-ray: 9ef399844d1e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5243,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2623)","md5":"ce6b322b3da2626194528aeac2399a70","sha1":"077b509bc2f8397b52872b29d8c4700f89b0dfc3","sha256":"d79802b8bbe6ea3debb61fd0da8c8b84d8ebdb534aec6c8abcf8bd316b7ae6ac","sha512":"18492d77405a950d70535717380ce047dba243b061ee108db8f3948a8bc9ae97bb79c36d9f9c620cccae54499b3d415cef466b6893bc5075a7012c261bc1fa17","ssdeep":"96:E2L3XiNBKkkRmGrFjPejEX9/16A9jaQ4WIIr3U+6H46wTwt:TL3XizKJR9rFzejEXRsCN4WIK3UpIwt","tlshash":"e9b19744f50dde7999a7008c20959d20f229df8ace30278af0ff82559bb5c19bf8275c","first_seen":"2026-04-20T10:52:57.836244Z","last_seen":"2026-04-20T10:52:57.836244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_fonts/GsKUclqeNLJ96g5AU593ug6yanivOiwjW_7zESNPChw-jHA4tBeM1bjF7LATGUpfBuSTyomIFrWBTzjF7txVYfg.woff2 HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ppv.cx/_app/entry.DEzmYzyd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26636\r\naccept-ranges: bytes\r\netag: \"69da1299-680c\"\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZ0j%2BA4%2BjEs7mv1r4%2FnVwfwrSAVyQnEFJOE1CQWq4nXyBsh%2BGNVhPDguOUnpJxBjMzxet3BmT1SJqNWlw2jgR9b6D5IsZw1nOg2pZc8UFrr79iEK5tjWJXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ef39987ca0b5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26636, version 1.0","md5":"45ac3f4b61c187a0e3d9e6ba1198df6a","sha1":"989b6c577de591300a4a67eae64de52874a595c5","sha256":"c1b6da516e0062e9c2f341b3a51dd2d621d946da72f06c6cfe05fd9d2dd8622d","sha512":"c6adca49a99a155f8cf10dd4c9fac51ada10f82ba1ffcc75e6fe4489e2fa2387ef3b33038173b2cdbbf68a9ed4caefd38c4e4ad9e3a1d703f41b7c8d0b2cb61b","ssdeep":"768:B2gIWbTcumF6jQdZY0LNAwTrYzzkgVUog:HIeQex0uwIZUog","tlshash":"d6c2f1e02194ff513790f3b3bb9c6225dd880197bae3584b5e18a580d713a03d92e7db","first_seen":"2024-12-02T17:41:43.935684Z","last_seen":"2026-06-13T05:07:53.931835Z","times_seen":912,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BsN4hVl7.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BsN4hVl7.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:29 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2ps61d7NYrGV2qyRasUtQEuyD5WteUv2AQ7BVIAb5P6%2BP7ZLoC4kMqZSkm7obnmdwA2L2kTsWWjOcVBgamjClJEzLzC4LxA4n6mfxj4xaCxAG1L9BN0Ll4%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: MISS\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69da1299-1ba\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988bb895684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (441)","md5":"1b5bc2061b7a2f73f64be1172e271754","sha1":"215c8547051fb61fe7efd3bd511816a2742810a6","sha256":"24c60fea76ee03fd0ae8d724b45c6d97975a7cc3db3700d44f581416e555c71f","sha512":"774d5b5c369a53c57df5615c2fda81ef27b3bd5a6ef2efc4d8ece1830577882c863d3a40a3231dc5aaae4935fb4e609090bcfeaa7b0f742ec7840342885235a4","ssdeep":"","tlshash":"bcf0a34d7948dd7924165c89113adc24452fa85dd63cb1c0e1417d74b7c849c731b728","first_seen":"2026-04-20T10:52:57.776266Z","last_seen":"2026-04-20T10:52:57.776266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ppv.cx/_app/BYmHHTet.js","fqdn":"ppv.cx","domain":"ppv.cx","tld":"cx"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ppv.cx/","date":"2026-04-20T10:52:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppv.cx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:36:24 GMT","end":"Fri, 22 May 2026 03:36:23 GMT"},"fingerprint":{"sha1":"87:CD:79:18:96:C2:C4:38:D9:5F:34:8A:3B:6A:FA:B9:0D:AF:7D:39","sha256":"23:FF:38:36:E3:44:96:6D:A3:07:07:FC:CF:92:DC:76:82:93:2B:C2:66:07:8C:03:13:72:C5:7A:04:40:BD:0D"}}},"request":{"raw":"GET /_app/BYmHHTet.js HTTP/1.1\r\nHost: ppv.cx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ppv.cx/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:52:28 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 39\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGnwt99wvME0XAIxuqfs1LGahks6zb43KQLkRtrxbJU6moun%2BGLaJusM023C3HNN4Aytgxbtyc%2B0ndkVTcf%2FiUlk9js2um0AASAWMlMXoIpELaR1jHmKNwE%3D\"}]}\r\nlast-modified: Sat, 11 Apr 2026 09:21:29 GMT\r\nserver: cloudflare\r\nx-cache-status: HIT\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69da1299-198e\"\r\ncontent-encoding: br\r\ncf-ray: 9ef39988cb8e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6541)","md5":"50d56f0626ce079f318c9f092854b226","sha1":"d43cf59462977d0caacbb56542f00aa79ad0dbad","sha256":"3239eb29c223418c680e94e3239e8bbf4a4db15136458bf7b30a4df6fb4ab781","sha512":"c2064ac1d64704218632b107fd8641509bfb54601e2be56d2ebf68d34c04f40c3c0f3dde78789a207f529b70e179e6230fc0f08fc2eed91276dd2aa34533d8a5","ssdeep":"192:TumZgoDE33xLrjIFn2Slh6Sxm9ThRFW/a+U/N:PaoDW3xXctZlLxq7+U1","tlshash":"a5d1c7cc35d720a5bf7554e050e6f114b12aeb88701590d0f22dfd6928ab98cfa6db3e","first_seen":"2026-04-20T10:52:57.83982Z","last_seen":"2026-04-20T10:52:57.83982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"ppv.cx","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}