{"report_id":"fb484fe5-1d06-4481-9bf5-11cb460b8928","version":6,"status":"done","tags":[],"date":"2024-05-15T02:31:06Z","url":{"schema":"http","addr":"52.pexeburay.com/index/m3?diff=0\u0026utm_source=ogdd\u0026utm_campaign=26670\u0026utm_content=\u0026utm_clickid=u04o040ckgo4wowo\u0026aurl=https:/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubble%20budddy%20-%20%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%20%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%20%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%20%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%20%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play\u0026an=\u0026utm_term=\u0026site=\u0026isubs=0","fqdn":"52.pexeburay.com","domain":"pexeburay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"52.pexeburay.com/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play","fqdn":"52.pexeburay.com","domain":"pexeburay.com","tld":"com"},"title":"52.pexeburay.com/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-жоскийфонкподтокийскийдрифт.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T16:55:47Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hdtcode.com","ip":{"addr":"31.220.27.135","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-04-29","domain_rank":0,"first_seen":"2019-05-01 19:48:45","last_seen":"2024-04-29 14:11:05","alert_count":0,"request_count":1,"received_data":272,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cesupufius.com","ip":{"addr":"88.208.46.43","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-03-09","domain_rank":0,"first_seen":"2023-03-09 11:55:19","last_seen":"2024-04-29 15:57:17","alert_count":0,"request_count":1,"received_data":3861,"sent_data":487,"comment":"","tags":null,"fingerprints":null},{"fqdn":"52.pexeburay.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-05-11","domain_rank":0,"first_seen":"2023-05-16 22:17:54","last_seen":"2024-03-28 08:00:17","alert_count":0,"request_count":2,"received_data":13050,"sent_data":2962,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-05-15T02:30:38Z","timestamp":1715740238,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46622,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-15T02:30:38.424531+0000\",\"flow_id\":694288396636013,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":46622,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"mail.boaonlinecdesk.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":466,\"bytes_toclient\":116,\"start\":\"2024-05-15T02:26:08.773997+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-15T02:30:40Z","timestamp":1715740240,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46672,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-15T02:30:40.388982+0000\",\"flow_id\":2244062920989487,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":46672,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"mail.boaonlinecdesk.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":466,\"bytes_toclient\":116,\"start\":\"2024-05-15T02:26:10.547631+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-15T02:30:52Z","timestamp":1715740252,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46622,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-15T02:30:52.510932+0000\",\"flow_id\":1505038635683693,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":46622,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"mail.boaonlinecdesk.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":466,\"bytes_toclient\":116,\"start\":\"2024-05-15T02:26:08.773997+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-15T02:30:53Z","timestamp":1715740253,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46714,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-15T02:30:53.182919+0000\",\"flow_id\":520318599028286,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":46714,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"mail.boaonlinecdesk.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":466,\"bytes_toclient\":116,\"start\":\"2024-05-15T02:26:11.450110+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-15T02:30:56Z","timestamp":1715740256,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46756,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-15T02:30:56.531759+0000\",\"flow_id\":1085046668970275,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":46756,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"mail.boaonlinecdesk.duckdns.org\",\"url\":\"/login.php?online_id=51195c1fccd7c704073afd18clogin_id=897630d7dc067d8b8fa9496edb04bd01897630d7dc067d8b8fa9496edb04bd01\u0026session=897630d7dc067d8b8fa9496edb04bd01897630d7dc067d8b8fa9496edb04bd01\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":777,\"bytes_toclient\":116,\"start\":\"2024-05-15T02:26:12.968995+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"hdtcode.com/event?data=\u0026id=10","fqdn":"hdtcode.com","domain":"hdtcode.com","tld":"com"},"ip":{"addr":"31.220.27.135","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-05-15T02:30:41.954606313Z","timestamp":1715740241954,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /event?data=\u0026id=10 HTTP/1.1\r\nHost: hdtcode.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://52.pexeburay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.23.2\r\ndate: Wed, 15 May 2024 02:30:41 GMT\r\ncontent-length: 0\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T13:55:58.474524Z","times_seen":13664276,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cesupufius.com/13107","fqdn":"cesupufius.com","domain":"cesupufius.com","tld":"com"},"ip":{"addr":"88.208.46.43","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-05-15T02:30:41.991111492Z","timestamp":1715740241991,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /13107 HTTP/1.1\r\nHost: cesupufius.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://52.pexeburay.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 217\r\nOrigin: https://52.pexeburay.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 15 May 2024 02:30:41 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://52.pexeburay.com\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nSet-Cookie: userid=149c439e-925f-4286-891e-3292a2dd1b5c; expires=Tue, 15-May-2029 02:30:41 GMT; Path=/; SameSite=None; Secure\r\nAccept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3246,"size_decoded":3246,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"778ffacfcd18b0523f5d289ac7314ac9","sha1":"32c3a514b4adf5320b728e77a6957778704e5f97","sha256":"632b92a81ac0fc2f108b63d093772925714058a072f184009c47ca1b808e2385","sha512":"f55f20ae07ee3657c815be2323dc21f609a208554a90d19892ec711dcd1c16cb70090a497cf4817b133acb8d881a3ddeaab17544795598c43953fa3f57ff417e","ssdeep":"","tlshash":"23619acb26f5825f86c93cdad7765c7d30698c98df4a4396efd76417e8072340a08384","first_seen":"2024-08-19T22:56:02.464064Z","last_seen":"2024-08-19T22:56:02.464064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"52.pexeburay.com/favicon.ico","fqdn":"52.pexeburay.com","domain":"pexeburay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://52.pexeburay.com/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play","date":"2024-05-15T02:30:42.129Z","timestamp":1715740242129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pexeburay.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Apr 2024 02:48:20 GMT","end":"Mon, 29 Jul 2024 02:48:19 GMT"},"fingerprint":{"sha1":"A3:55:01:B1:99:09:C4:F5:8E:26:BF:DA:11:52:F2:1D:BA:7D:7D:34","sha256":"3C:8E:06:CB:39:1C:00:8C:43:4E:7A:A5:8A:75:03:4A:4B:04:B3:31:BC:3A:0F:CA:03:7B:E8:29:E5:FC:17:58"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 52.pexeburay.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://52.pexeburay.com/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play\r\nCookie: pmvid=149c439e-925f-4286-891e-3292a2dd1b5c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 May 2024 02:30:42 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 02 Nov 2022 12:29:48 GMT\r\netag: W/\"636262bc-1007\"\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=s4rMulYGPBEqwf2GOBtYVqh%2B2mO8eqHXFzzW2qUtNPa2KCPBq6t7kkhBHXwbcMTrM9cWgbsEqB%2FmRgTMFVvhMDMqVWMaty5lh9D%2FoH3TsZARxw9rQ%2Bd%2FaM6o6HasNmjVknZe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 883fb52159e35689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11756,"size_decoded":4103,"mime_type":"image/x-icon","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4cdf3256cd7b8ec3917adb79d6bf457e","sha1":"bc615337e9223183a126c8fb649774866fb53e69","sha256":"fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0","sha512":"2bcd90a667b80393690e244a979e36e9f482b419e52302571a41412aac296aac1d58f81787b38d00a00257dca8bd3dce7cfe6ab8ef12aa3a91e0801ee3c3f21a","ssdeep":"96:LSDZ/I09Da01l+gmkyTt6Hk8nT2JCkun8i01FZZN:LSDS0tKg9E05T23un8h5N","tlshash":"2e818daf99b0d47f7938fa400dce8281e279256c197637ad94e5c5ee00a7b031bb0232","first_seen":"2023-04-08T14:37:37Z","last_seen":"2026-04-12T09:57:15.262771Z","times_seen":8685,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"52.pexeburay.com/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play","fqdn":"52.pexeburay.com","domain":"pexeburay.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-15T02:30:42.045Z","timestamp":1715740242045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pexeburay.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Apr 2024 02:48:20 GMT","end":"Mon, 29 Jul 2024 02:48:19 GMT"},"fingerprint":{"sha1":"A3:55:01:B1:99:09:C4:F5:8E:26:BF:DA:11:52:F2:1D:BA:7D:7D:34","sha256":"3C:8E:06:CB:39:1C:00:8C:43:4E:7A:A5:8A:75:03:4A:4B:04:B3:31:BC:3A:0F:CA:03:7B:E8:29:E5:FC:17:58"}}},"request":{"raw":"GET /d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubblebudddy-%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play HTTP/1.1\r\nHost: 52.pexeburay.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://52.pexeburay.com/index/m3?diff=0\u0026utm_source=ogdd\u0026utm_campaign=26670\u0026utm_content=\u0026utm_clickid=u04o040ckgo4wowo\u0026aurl=https:/d5.hotplayer.ru/downloadm/b16efc90d837c871a6a00d5297e3961b/643407861_456239137/95b4926ff888-f2154fef72f1-6acfd237312/bubble%20budddy%20-%20%C3%90%C2%B6%C3%90%C2%BE%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%20%C3%91%E2%80%9E%C3%90%C2%BE%C3%90%C2%BD%C3%90%C2%BA%20%C3%90%C2%BF%C3%90%C2%BE%C3%90%C2%B4%20%C3%91%E2%80%9A%C3%90%C2%BE%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%C3%91%C2%81%C3%90%C2%BA%C3%90%C2%B8%C3%90%C2%B9%20%C3%90%C2%B4%C3%91%E2%82%AC%C3%90%C2%B8%C3%91%E2%80%9E%C3%91%E2%80%9A.mp3?_gl=1*1hwztv2*_ga*mteyndgznjk0oc4xnze1mdk2odu0*_ga_tdd9ckxjwn*mtcxnta5njg1nc4xljaumtcxnta5njg1nc4wljauma..?play\u0026an=\u0026utm_term=\u0026site=\u0026isubs=0\r\nCookie: pmvid=149c439e-925f-4286-891e-3292a2dd1b5c\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 15 May 2024 02:30:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DD5MLB5v9MMPJHS%2BskHkVNx6y9UKKjlLg%2BrgZq0kIODqYUkM2FRTCO91%2BqtNVTvxpewzkg1%2FXgTVGy%2Bkmth%2FFfB24OCrVh0SGYYz%2F%2FvgfVUoKLJ7W75t%2F%2F9nAxLEFRfn1FVt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 883fb520c9c55689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":15,"size_decoded":15,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"de9219e425cc35b85e0fa0222f625269","sha1":"676f3404e2d750681eca701eff3d954f1e4423b4","sha256":"2d857a3660e0240bac3ae9f98e2287f46eb6aebf724775fe130af2a6c7dfc3c4","sha512":"ab9b3b066ea4ff0af3a36b4eebfcbb8789503c2dfc64d75e94f038cc1b57db7f5c55f0c72d9c7910eb4d3bd133d4f8f6df321e57660c55d2ce5648df2a7670d8","ssdeep":"","tlshash":"9160000c0003c3ccc000003333c00300000c0303f03030330000f3000c0003c00c000c","first_seen":"2023-03-14T06:02:58Z","last_seen":"2026-04-10T22:20:13.698885Z","times_seen":661,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}