{"report_id":"0a08a4f3-f070-4aba-8eae-be655bd22b52","version":6,"status":"done","tags":[],"date":"2025-09-24T12:41:21Z","url":{"schema":"http","addr":"lolykidd.com/register?i=264","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"172.67.194.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lolykidd.com/register?i=264","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"title":"Register"},"submit":{"url":{"schema":"http","addr":"lolykidd.com/register?i=264","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"172.67.194.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T12:41:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"img001.prntscr.com","ip":{"addr":"172.66.175.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-01-07","domain_rank":1734062,"first_seen":"2022-02-19T15:13:18Z","last_seen":"2025-09-24T04:22:45.836349Z","alert_count":0,"request_count":1,"received_data":14904,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"csp-reporting.cloudflare.com","ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":29716,"first_seen":"2022-01-10T16:52:27Z","last_seen":"2025-09-21T22:24:01.451804Z","alert_count":0,"request_count":6,"received_data":1080,"sent_data":4476,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lolykidd.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-09-24T12:41:21.663304Z","last_seen":"2025-09-24T12:41:21.663304Z","alert_count":8,"request_count":8,"received_data":668054,"sent_data":4747,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":18454,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lolykidd.com/js/main.js","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce7d71e36525400e0562f4f8a281ee57","sha1":"56fdc4ee29d452762d294f5802cd989c7e2624b0","sha256":"b0e383dc11cbc6541f3ac56247b749944e030cece99d7769475d79fdc6be6bec","sha512":"46bf9f29e03acf47a2dce0ff944cb1a3d4efcfce66900bf28254f4f80d76cd5a7b3cdfac0710b207bd247b5ae8900995e6bbdd48668325ef8f1d7799d055e534","ssdeep":"48:1IKhhDnigC3+3Dy9SITGssMTVOirR5ay0657NWEaZcWQAl57NWEENNSNxz4iutQk:zh9niDE70VDrXj2tJLMiutQvUXqGZie","tlshash":"35811faa7028297086f73bb767a396d8fb359063a841c642385cc5c21ff1a50d973edc","size":4180,"data":"","first_seen":"2025-08-09T21:47:05.5095Z","last_seen":"2025-09-30T17:40:22.906599Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-28T13:45:41.531016Z","times_seen":3835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d4ab2680bcb20aa61fa7b6bc215a662","sha1":"95344ae71641b80679b31b65eb4a035e37757877","sha256":"d2df3fcc0a2bfe331122261cc1e56fe8bf84039a3c17b4a46a164909d00e3a7e","sha512":"569e6ed03760e7584f2b55917ea4d43920cabff9d6eb73e877a719d6ff9e49b741161cab478342ea821c835d0e4f3f4f1ade8e3e888e8a0e37cc02ec791ce6ff","ssdeep":"","tlshash":"b4d023553979c93171d5024a20b9d398256021507711f14483cecc3f5f11dd349f166c","size":217,"data":"","first_seen":"2025-09-24T12:41:24.386521Z","last_seen":"2025-09-24T12:41:24.386521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/register?i=264","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2a569112eae09e533b08ade1ba0b255","sha1":"249f938174371ec91fbe95af0c4cfb66e114c733","sha256":"73065c18437ab5f4d3b48baa3b7e5bf34fabc01e61a49d8289a2906355e9bed4","sha512":"3558f19ab2501238e3678e9ce70819cd3b5a4f295d8f7c02f51a7565becb17606c5930518aa8099d52f2b7d1b7edcd5e99f9b3256a2e97f4983bd4b0dbc39979","ssdeep":"","tlshash":"711100753b1a5534c6c5418b317ee7a83d3260217a02e084c36ccc389d18e8314efdbe","size":902,"data":"","first_seen":"2025-09-24T12:41:24.388829Z","last_seen":"2025-09-24T12:41:24.388829Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a41458cf24984680e0a3748e6344d75e","sha1":"725ee6f35d466cd1a8834b61d22bad035fb9dae3","sha256":"a3bd2f1794d26c406adaf41842abc5ae03531c105323aa0f4d515bb4dfac8595","sha512":"06da7f6e1c8701c56598cb14ceddefa5675592b0bf1d72737990177e258df4a340ab1289748ffd11a8fd75c9469377e4528b0f338ef9796be6a49975b4c9d57d","ssdeep":"192:uA/fZ7KVkNto/S/JfRdOAA5iVETzvk3itwCPATIfRxGYOrc3:uAX8VytoefRPw0ETzpK9rc3","tlshash":"4822e5c7df4f352c623438ea014fa4e6620ddda620105886db119bf47f60779b8caeda","size":10109,"data":"","first_seen":"2025-09-24T12:41:24.381796Z","last_seen":"2025-09-24T13:10:18.043436Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:40:59.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 649\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:40:59 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7d6bd535a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":32,"dns":23,"connect":1,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 613\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7f88be35a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 675\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7fb94f35a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 675\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7f88c235a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/eb39805feb3b/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 98425a7fab680b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10109,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 645\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7fb94a35a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/register?i=264","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T12:40:58.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /register?i=264 HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:40:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; Path=/; Max-Age=31536000; Expires=Thu, 24 Sep 2026 12:40:59 GMT\nconnect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc; HttpOnly; Path=/\r\ncf-ray: 98425a77fb5556b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16902,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (13611), with CRLF line terminators","md5":"7fcab01c44c988536aa5c24c449ba991","sha1":"9520d08a7a4bec0ec183a611714bee667ac1a9bc","sha256":"17d8a2fe2d8da528efb0c73954540318fb335edc7d6f2e1cd93d04ac5a51c562","sha512":"720bed5954467bd5ff9653492ce806d96b468f0816b13dc9998a919f5c50c1e35e306e1c9ecb73a5bf6c74f2c62dd5cd19b051a8ee786c447e6d14e75e27b75f","ssdeep":"384:os6Xf8tfTiq7rNzVDzLPKK3FG1NovZ23jft8uIqNjEnx/q:os0EJiOnvGgvcjftNZax/q","tlshash":"3572215de7e2677cb00057e4416543a07bab849aaf22c670e3f98a73bf1680cc5b58d7","first_seen":"2025-09-24T12:41:24.361585Z","last_seen":"2025-09-24T12:41:24.361585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":38,"dns":10,"connect":1,"send":0,"wait":618,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/css/register.css","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:40:59.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /css/register.css HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/register?i=264\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:40:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 29 Jul 2025 02:02:32 GMT\r\netag: W/\"18b0-19853eac6c0\"\r\ncf-cache-status: EXPIRED\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zge4jjxAPUkSw00N9I1U2RQX%2BATQLqWznPJF%2F%2FYpAciuNF0J%2FNLfxT1L6m743FCnwPhCUEUeM1ZBZypUgTWnsbgA339Bh3az%2BeE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98425a7d28da0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6320,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"ace684cbe63192ff8c5fe2437f5d328d","sha1":"891ba05f07122433d98c12223c412096b2581f86","sha256":"32061d9c88459b721a8c488f80a89c1868602b5024c9244dc333c246c787da9e","sha512":"f17791f516e32204ebd76403923b38ac0f5977c55390f7b4038129a156298e6b4098db3e04d89e6b45399b64cf9a36dee8a4de7a3385586026badbfd2e9cc7dd","ssdeep":"96:xWWeFdl/A5OM8VsI9GsS1hdGrFqdA0a/EZEQ4L/xcqWY0:xWWeXC5OM8VsI9Vc/tdb6Qb/","tlshash":"0ed1de59da4002437237cef867a38a65f7a545638a07427d7bae32509f7c0ad9260fca","first_seen":"2025-08-09T21:47:05.501905Z","last_seen":"2025-09-30T17:40:22.917228Z","times_seen":13,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:40:59.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 530\r\ndate: Wed, 24 Sep 2025 12:40:59 GMT\r\nx-served-by: cache-fra-etou8220089-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-04-28T13:45:41.531016Z","times_seen":3835,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":31,"dns":1,"connect":13,"send":0,"wait":43,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/js/main.js","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:40:59.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/register?i=264\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:40:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 29 Jul 2025 02:05:38 GMT\r\netag: W/\"1054-19853ed9d50\"\r\ncf-cache-status: EXPIRED\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgFBFNjoHK6qs2e1Dj%2B52IeWbvokQySf95oWAK9NntYkv%2BF8vh2AoxuqadLMWT%2BVk0y3S2VgkhZm%2FLY06yHg2cyEf%2Br7%2FM4Ne%2B8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98425a7d28e00b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4180,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ce7d71e36525400e0562f4f8a281ee57","sha1":"56fdc4ee29d452762d294f5802cd989c7e2624b0","sha256":"b0e383dc11cbc6541f3ac56247b749944e030cece99d7769475d79fdc6be6bec","sha512":"46bf9f29e03acf47a2dce0ff944cb1a3d4efcfce66900bf28254f4f80d76cd5a7b3cdfac0710b207bd247b5ae8900995e6bbdd48668325ef8f1d7799d055e534","ssdeep":"48:1IKhhDnigC3+3Dy9SITGssMTVOirR5ay0657NWEaZcWQAl57NWEENNSNxz4iutQk:zh9niDE70VDrXj2tJLMiutQvUXqGZie","tlshash":"35811faa7028297086f73bb767a396d8fb359063a841c642385cc5c21ff1a50d973edc","first_seen":"2025-08-09T21:47:05.5095Z","last_seen":"2025-09-30T17:40:22.906599Z","times_seen":13,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/icon/logo/1.jpg","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:40:59.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /icon/logo/1.jpg HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/register?i=264\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77619\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 17 Jul 2025 22:17:02 GMT\r\netag: W/\"12f33-1981a765f30\"\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krzQG8JWn0%2Bt8o8ZXoBsM6yLiGDSZmHjsl5dg8RHsmkhHB7jbW0aB%2FYEg4vMVprPMM022aYGDPWXhtJepjY18cBKvfFleS72c%2Fg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98425a7d28dd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":77619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 640x640, components 3","md5":"09a3a3333269abf4b487a3ae28c0650c","sha1":"b3cbfb7f89756360a86c8859abe3b28df0c17639","sha256":"782e09221663931fab637eac800c1671933af190130eac9fc7530de7f36d7100","sha512":"af4898154b7c875055db94e6ffb390ed3f4a9d30bfba2cef84c9828828e43c14ed7b386ddd24a74e0e9675a07db60e451f533fd767b1955cca0245c561b617e3","ssdeep":"1536:axn9NX+At/989CRj8gF6r8FO/TxQu9OZoYUMX4rnBSInZFKOywtMJ7UKS6:g9NX+muQDF6r/tQaAYlZd9O7/S6","tlshash":"68730207c454f6301b10b23dcbb11d33862e116ae6b7b0e952c71f99a3c97af44759aa","first_seen":"2025-08-04T20:32:25.415969Z","last_seen":"2025-10-31T02:36:25.385191Z","times_seen":9,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/eb39805feb3b/main.js?","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/eb39805feb3b/main.js? HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98425a7fdb820b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10109,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10109), with no line terminators","md5":"a41458cf24984680e0a3748e6344d75e","sha1":"725ee6f35d466cd1a8834b61d22bad035fb9dae3","sha256":"a3bd2f1794d26c406adaf41842abc5ae03531c105323aa0f4d515bb4dfac8595","sha512":"06da7f6e1c8701c56598cb14ceddefa5675592b0bf1d72737990177e258df4a340ab1289748ffd11a8fd75c9469377e4528b0f338ef9796be6a49975b4c9d57d","ssdeep":"192:uA/fZ7KVkNto/S/JfRdOAA5iVETzvk3itwCPATIfRxGYOrc3:uAX8VytoefRPw0ETzpK9rc3","tlshash":"4822e5c7df4f352c623438ea014fa4e6620ddda620105886db119bf47f60779b8caeda","first_seen":"2025-09-24T12:41:24.381796Z","last_seen":"2025-09-24T13:10:18.043436Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.9261667392872449:1758715959:c-QNoK4__ajTSW03-q_7ywNku5AlMxqw8FT4uOQ9Zcw/98425a77fb5556b5","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/r/0.9261667392872449:1758715959:c-QNoK4__ajTSW03-q_7ywNku5AlMxqw8FT4uOQ9Zcw/98425a77fb5556b5 HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12092\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/register?i=264\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nset-cookie: cf_clearance=dVC.dhugONimOOLbquzfX0xDnlsVN.vlpbKeZQbMKNM-1758717660-1.2.1.1-gvnFJqfykTaHUJU_G8LmTJLW9DMz1xWOxUH_SOTSoGdda649Cr9_uiWI0H8HgmfQuN6g0xTkut4_.LkDedQND6Yfu1XB5vTWpzuXA18jkloCrD1b7yL88guK3TMUVXevLJJU31dAtRnko8zf198P7E85HuzOID5e_4lZop3BzvKIBUjB_yqp93QhfItmjObQ1of3NJFgSmDjOf4lAXh.QThAAPr2b6lJ_50jeUVP764; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=lolykidd.com; Expires=Thu, 24 Sep 2026 12:41:00 GMT\r\ncf-ray: 98425a80dc9b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lolykidd.com/icon/background/1.png","fqdn":"lolykidd.com","domain":"lolykidd.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lolykidd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 19:35:05 GMT","end":"Mon, 22 Dec 2025 20:33:54 GMT"},"fingerprint":{"sha1":"4B:21:66:29:44:D8:F6:15:EB:A3:53:7D:43:9B:36:B1:72:D1:BD:CA","sha256":"26:10:2A:3C:26:93:9A:52:77:FA:2A:06:F3:26:80:E7:E4:04:B4:41:C9:AE:DD:82:AE:1E:E3:0D:22:93:FD:5F"}}},"request":{"raw":"GET /icon/background/1.png HTTP/1.1\r\nHost: lolykidd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/register?i=264\r\nCookie: uid=a44611d8-fb4d-432b-beda-b087884847ba; connect.sid=s%3AwCCEV_jyHeTcM2W7sPzdvlEUdYsY4ocF.MOdPTBVneLHbTsSOZNB1oUVDfYLJ9wmn4IatS4HGfKc\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 537169\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 18 Jul 2025 22:22:44 GMT\r\netag: W/\"83251-1981fa1f320\"\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXuztI7OZRhSQSoQAF6xhCqNHxNjf%2FwhkZZkGYVKeF6mN4p2M88ZYq8yzKELNTSkpPGFahE94dNeU5aNKaEToCTSAl5e5IvWJXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98425a7f2ae40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":537169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1919 x 1079, 8-bit/color RGB, non-interlaced","md5":"9778e8487a14f69eed6dbb2b53ecf705","sha1":"f835253af410f0e972c2f29c3c56aa09bc67984d","sha256":"933d9f811554748489a791a757cd6acf6086ac13c80f6ee63dd74aa5c902be2d","sha512":"b905d62c0663fa7629985cbc39affbf8f67e8f743002afe41b911fc3a823a190664d0e10cc2baf057d8303c72bb5a221f6885c4e31242d3dfc8f7e6caed80ca9","ssdeep":"12288:IszdG/ybfiAx34Xc0FneE/6D5LOkQtxZgT9gQ:IC/fikAXU5CkQHqTmQ","tlshash":"4cb412acd0b848a0ffd5a4b3e6d3a6245f7db4bb6d5520eca294b1b1193c27c470948f","first_seen":"2025-07-26T21:49:37.272352Z","last_seen":"2025-10-29T04:14:37.210183Z","times_seen":9,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":695,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"lolykidd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg","fqdn":"csp-reporting.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.21.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csp-reporting.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 15:17:26 GMT","end":"Wed, 19 Nov 2025 16:17:05 GMT"},"fingerprint":{"sha1":"33:76:B7:3E:5D:D2:D5:40:06:45:BD:7F:C9:0A:81:17:93:74:EA:DC","sha256":"E4:E6:13:72:AE:88:67:32:BD:01:F5:86:74:83:EB:63:B6:B7:F5:D3:58:7F:6B:C7:05:52:97:A4:2F:02:AE:2B"}}},"request":{"raw":"POST /cdn-cgi/script_monitor/report?m=NwPTBIk.hiuDYF.HsdImeQep12Jr51GRFTUVwXOyl7g-1758717658.8732004-1.0.1.1-rKTipNUEGILhfZaWSUBWMy6QlAidLEkVGCmLCBi8CcAf_Ebohc9FnUTX6YXhzD9QNI.DiuvEwZMqriVgWgqnh32g2ymbPIFZchdQMwDNCyCkRn2JVYJnulYBaZ992CA.wHE9gn.1vEHKGk3TlZzQTbnN7abnZzWt3AZggqieLsg HTTP/1.1\r\nHost: csp-reporting.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 617\r\nOrigin: https://lolykidd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\nserver: cloudflare\r\ncf-ray: 98425a7fd98e35a6-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T16:24:19.191442Z","times_seen":14333662,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img001.prntscr.com/file/img001/PvvT4-lrSIWmxAY0CRwssw.png","fqdn":"img001.prntscr.com","domain":"prntscr.com","tld":"com"},"ip":{"addr":"172.66.175.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lolykidd.com/register?i=264","date":"2025-09-24T12:41:00.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prntscr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 19:46:36 GMT","end":"Sat, 13 Dec 2025 20:25:27 GMT"},"fingerprint":{"sha1":"FA:AA:72:2D:EE:D2:6D:DA:1B:D2:35:FF:BF:D6:31:05:CB:BA:F0:42","sha256":"DA:F3:60:25:35:EB:0E:90:CE:1A:84:30:D9:5D:7E:4C:81:CE:CB:D8:72:BA:B3:C4:8F:43:92:28:D4:92:22:04"}}},"request":{"raw":"GET /file/img001/PvvT4-lrSIWmxAY0CRwssw.png HTTP/1.1\r\nHost: img001.prntscr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lolykidd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 12:41:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 14195\r\nserver: cloudflare\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=17741\r\nstrict-transport-security: max-age=63072000\r\nvary: accept\r\nx-bz-upload-timestamp: 1752787923278\r\nx-bz-content-sha1: 020c07e379b50b606f014e925824a7c37245de9a\r\nx-bz-file-id: 4_z51bcbe33c7b20fe37efb0b11_f11844529f14a8bfd_d20250717_m213203_c004_v0402014_t0004_u01752787923278\r\nx-bz-file-name: PvvT4-lrSIWmxAY0CRwssw.png\r\nlast-modified: Tue, 26 Aug 2025 02:41:51 GMT\r\ncf-cache-status: HIT\r\nage: 2012504\r\ncf-ray: 98425a816bdd56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14195,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0e77a5e8996186b553d6bbaaef80d73c","sha1":"174fb130bd8d6e33292b00ac858984918d6cfa60","sha256":"dd7703045a52787ac65f51defd15c689e73cc277b4c845056d72ac28a08a4d7e","sha512":"110d898921435c3f70dd879f633c717fb45019cd8e2ecd031d1fe43b2f01fa2f2cd167ab542a87a3970d2e137ca404c0e5e8a45cedb1e84e6a5981be3cb30a49","ssdeep":"384:tiAvXEv1wJsKpD9KQI/eEEQ9/g5L6D8wH4obJJlyv:twvSpQmE7tQ6PzJlk","tlshash":"bc52c0fd7a76bdf3d4cec714e2562a2289853819af4ea5123901908e8e90d7e76a4dc0","first_seen":"2025-09-01T09:04:45.597861Z","last_seen":"2025-10-31T02:36:25.378252Z","times_seen":16,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":28,"connect":1,"send":0,"wait":21,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}